Product by Containers

    Crun

    4 known vulnerabilities in Crun (Containers), 0 of them actively exploited (CISA KEV).

    Key figures

    4

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    0

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Crun (Containers)
    HighCVE-2025-24965

    .krun_config.json symlink attack creates or overwrites file on the host in crun

    —
    MediumCVE-2026-88264

    Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs

    also in 5 other products

    5.6
    MediumCVE-2026-47766

    crun follows rootfs /dev symlink while creating default devices

    —
    HighCVE-2026-30892

    Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation

    also in 3 other products

    —

    All products by Containers