CVE-2026-50540: Kata Containers: Config Path Annotation Arbitrary File Loading

Overview

Severity
Critical (CVSS 9.6)
CVSS Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:N
Exploit Status
Not Exploited
Patch Tuesday
2026-Aug
Released
2026-08-09
EPSS Score
0.38% (percentile: 30.5%)

Affected Products (2)

Open Source Software

  • azl3 kata-containers 3.32.0.kata0-2 on Azure Linux 3.0
  • azl3 kata-containers-cc 3.15.0.aks0-16 on Azure Linux 3.0

Revision History

  • 2026-08-09: Information published.