What’s Vulnerable › Products

kata-containers vulnerabilities

9 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 8 published in the last 12 months.

Check whether your kata-containers version is affected

Latest kata-containers vulnerabilities

• CVE-2026-64676 — Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory (CVSS 5.7)
• CVE-2026-47243 — Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs (CVSS 9.2)
• CVE-2026-50540 — Kata Containers: Config Path Annotation Arbitrary File Loading (CVSS 9.6)
• CVE-2026-44210 — Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations (CVSS 9.9)
• CVE-2026-41326 — Kata Containers: CopyFile Policy Subversion via Symlinks (CVSS 8.2)
• CVE-2026-24834 — Kata Container to Guest micro VM privilege escalation (CVSS 8.8)
• CVE-2026-24054 — Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers (CVSS 10.0)
• CVE-2025-58354 — Kata Containers coco-tdx malicious host can circumvent initdata verification (CVSS 6.9)
• CVE-2020-27151 — (CVSS 8.8)