Exploit discussion active in current signal (3 latest mentions)
Recommended action window: High priority (within 72h)
NVD description
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to 3.31.0, the runtime-rs standalone virtio-fs path is vulnerable to a guest-root to host-root escape. In this configuration, Kata runs the host virtiofsd as root with --sandbox none --seccomp none, so an attacker with root-equivalent access inside the guest can bypass the guest virtio-fs client entirely by taking over the virtio-fs PCI device and building a virtqueue in userspace to submit raw FUSE requests directly to the host virtiofsd. A crafted FUSE_SYMLINK request whose new symlink name is an absolute host path is honored outside the configured shared directory, allowing guest root to create root-owned symlinks in sensitive host locations such as /etc/cron.d. By pointing such a symlink at a guest-controlled crontab payload reachable through a live runtime process's mount namespace, the attacker causes the host cron daemon to execute that payload as host root, crossing the Kata isolation boundary. This issue is fixed in version 3.31.0.
Priority
MEDIUM
Exploitation
NONE
PoC
YES
Patch
AVAILABLE
Momentum
STABLE
| Date | Total | Labels |
|---|
| 2026-05-21 | 1 | General1 |
| 2026-05-23 | 1 | Disclosure1 |
| 2026-05-28 | 2 | PoC2 |
| 2026-06-16 | 1 | General1 |
| 2026-06-26 | 1 | Disclosure1 |
| 2026-08-08 | 3 | Disclosure1General2 |
this week in containers don't contain we see an interesting escape - CVE-2026-47243 - in kata's runtime-rs - if you're gonna kata you might as well go full unikernel
Post summary
The tweet alerts to a new CVE (2026-47243) affecting Kata's runtime-rs and hints at an escape, but offers no further technical detail, PoC, or patch information.
CVE-2026-47243: Kata Containers runtime-rs 3.30: virtiofsd symlink escape https://www.openwall.com/lists/oss-security/2026/05/21/14 runs virtiofsd as root with --sandbox none --seccomp none. A raw FUSE_SYMLINK request lets guest root create host-root-owned symlinks in sensitive host paths. Fixed in 3.31.0.
Post summary
CVE-2026-47243 details a virtiofsd symlink escape in Kata Containers 3.30 that allows guest root to create host‑root symlinks; the issue is fixed in 3.31.0.
Explore the critical Kata Containers container escape vulnerability (CVE-2026-47243). Technical details and PoC exploit code are now fully public. #Cybersecurity #CloudSecurity #ContainerEscape #KataContainers #Infosec #CVE202647243 https://securityonline.info/kata-containers-container-escape-cve-2026-47243/ https://t.co/bpF0Zd63PH
Post summary
The post announces that the critical Kata Containers container escape vulnerability (CVE‑2026‑47243) is publicly documented with technical details and a PoC exploit code now available.
Kata Containersにホストrootへのエスケープ脆弱性。CVE-2026-47243。PoC（攻撃の概念実証コード）公開済み。runtime-rsシステムパスが攻撃表面。修正版提供あり。 https://securityonline.info/kata-containers-container-escape-cve-2026-47243/
Post summary
CVE‑2026‑47243 in Kata Containers allows host‑root escape; a PoC has been released and a fix is already available.
📦 Kata Containers guest-to-host escape vulnerability CVE-2026-47243 affects Kata Containers before 3.31.0. A flaw in the runtime-rs virtio-fs path could allow an attacker with root privileges inside a guest to escape the isolation boundary and reach root on the host. 🔎 Source: MITRE CVE / VulDB. #Containers #CloudSecurity #KataContainers #CVE #CyberSecurity
Post summary
The post announces CVE‑2026‑47243, a guest‑to‑host escape vulnerability in Kata Containers that permits a malicious guest with root rights to elevate privileges to the host.
🚨*CVE* CVE-2026-47243 Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to 3.31.0, t… https://www.cve.org/CVERecord?id=CVE-2026-47243 ----- Traducción: CVE-2026-47243 Kat… http://infoflow.cloud`
Post summary
The tweet merely references the CVE ID and provides a link, offering no substantive details about the vulnerability or its exploitation.
CVE-2026-47243 Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to 3.31.0, t… https://www.cve.org/CVERecord?id=CVE-2026-47243
Post summary
The post references CVE‑2026‑47243 as affecting Kata Containers before version 3.31.0, but provides no exploitation details, patches, or technical specifics.
CVE-2026-47243: Kata Containers guest-root to host-root escape via virtiofs https://www.openwall.com/lists/oss-security/2026/05/21/14?utm_source=dlvr.it&utm_medium=twitter
Post summary
The tweet shares a link to a discussion about CVE‑2026‑47243, describing a privilege‑escalation vulnerability in Kata Containers that allows guest‑root to host‑root escape via virtiofs. No PoC, exploit code, patch, or active exploitation claim is provided.
CVE-2026-47243: Kata Containers runtime-rs virtiofs Symlink Escape - What It Means for Your Business and How to Respond https://hubs.li/Q04lz0bN0
Post summary
The excerpt contains only the CVE title and a link, offering no substantive details, PoC, exploit, patch information, or evidence of active exploitation.