AI and data stack advisories

Severe, 6 weeks1496Projects326

1496 severe, 6 weeks · 326 projects

Red HatCVE-2026-15809

Red Hat Confidential Compute Attestation: format string

Red Hat

CVE-2026-15809 · Published Jul 15, 2026 · updated Nov 2, 2026

High7.8
No fix yet
Red Hat advisory

A flaw was found in CRI-O. The fix for a previous vulnerability (CVE-2022-4318) was incorrect, allowing it to be bypassed. An attacker capable of setting environment variables on a container can inject a newline character into the HOME environment variable. This issue allows the addition of arbitrary lines into /etc/passwd by use of a specially crafted environment variable.

Affected versions

PackageAffectedFixed in
Confidential Compute Attestation
Product
all versionsNo fix yet
Details and references

More Red Hat advisories

All Red Hat