VULNERABILITY INTELLIGENCE

CVE-2026-47766

CVSS score5.1 MEDIUM

EPSS probability0.22%

CISA KEVNot currently listed

Published2026-08-14

Last modified2026-09-18

Description

crun is an open source OCI Container Runtime fully written in C. Prior to version 1.28, crun's default device setup opens the container rootfs `/dev` directory without `O_NOFOLLOW`. If an OCI bundle contains `rootfs/dev` as a symlink and the bundle configuration does not mount `/dev`, crun follows t…