CVE-2026-111433

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2026-111433", "assignerOrgId": "7e1ac599-2767-43fa-b3ea-f10178cc98f2", "state": "PUBLISHED", "assignerShortName": "openEuler", "dateReserved": "2026-10-16T02:50:14.526Z", "datePublished": "2026-11-12T03:45:51.294Z", "dateUpdated": "2026-11-12T09:15:38.969Z"}, "containers": {"cna": {"providerMetadata": {"orgId": "7e1ac599-2767-43fa-b3ea-f10178cc98f2", "shortName": "openEuler", "dateUpdated": "2026-11-12T09:15:38.969Z"}, "problemTypes": [{"descriptions": [{"lang": "en", "cweId": "CWE-61", "description": "CWE-61 UNIX symbolic link (symlink) following", "type": "CWE"}]}], "affected": [{"vendor": "openEuler", "product": "iSulad", "platforms": ["Linux"], "collectionURL": "https://atomgit.com/src-openeuler/iSulad", "packageName": "iSulad", "repo": "https://atomgit.com/openeuler/iSulad", "programFiles": ["src/daemon/modules/spec/specs_mount.c"], "versions": [{"status": "affected", "version": "0", "lessThanOrEqual": "2.1.6", "versionType": "rpm"}], "defaultStatus": "affected"}], "descriptions": [{"lang": "en", "value": "UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nIf an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.", "supportingMedia": [{"type": "text/html", "base64": false, "value": "UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.<p>This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.</p><p>This issue affects iSulad: through 2.1.6.</p><p>If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.</p>"}]}], "references": [{"url": "https://atomgit.com/openeuler/iSulad/commit/3af9a2bf517b570fe20b1ee1070668a6270d6e11?ref=master&prId=2652", "tags": ["patch"]}, {"url": "https://atomgit.com/src-openeuler/iSulad/pull/812", "tags": ["patch"]}, {"url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865", "tags": ["vendor-advisory"]}], "metrics": [{"format": "CVSS", "scenarios": [{"lang": "en", "value": "GENERAL"}], "cvssV3_1": {"version": "3.1", "attackVector": "NETWORK", "attackComplexity": "LOW", "privilegesRequired": "NONE", "userInteraction": "NONE", "scope": "CHANGED", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "availabilityImpact": "NONE", "baseSeverity": "HIGH", "baseScore": 8.6, "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N"}}], "credits": [{"lang": "en", "value": "Tianyu Tu", "type": "finder"}], "source": {"discovery": "EXTERNAL"}, "x_generator": {"engine": "Vulnogram 1.0.5"}}}}

{}

{"affected": [{"affectedData": [{"collectionURL": "https://atomgit.com/src-openeuler/iSulad", "defaultStatus": "affected", "packageName": "iSulad", "platforms": ["Linux"], "product": "iSulad", "programFiles": ["src/daemon/modules/spec/specs_mount.c"], "repo": "https://atomgit.com/openeuler/iSulad", "vendor": "openEuler", "versions": [{"lessThanOrEqual": "2.1.6", "status": "affected", "version": "0", "versionType": "rpm"}]}], "source": "securities@openeuler.org"}], "cveTags": [], "descriptions": [{"lang": "en", "value": "UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nIf an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read."}], "id": "CVE-2026-111433", "lastModified": "2026-11-12T22:11:01.153", "metrics": {"cvssMetricV31": [{"cvssData": {"attackComplexity": "LOW", "attackVector": "NETWORK", "availabilityImpact": "NONE", "baseScore": 8.6, "baseSeverity": "HIGH", "confidentialityImpact": "HIGH", "integrityImpact": "NONE", "privilegesRequired": "NONE", "scope": "CHANGED", "userInteraction": "NONE", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N", "version": "3.1"}, "exploitabilityScore": 3.9, "impactScore": 4.0, "source": "securities@openeuler.org", "type": "Secondary"}]}, "published": "2026-11-12T04:17:17.160", "references": [{"source": "securities@openeuler.org", "url": "https://atomgit.com/openeuler/iSulad/commit/3af9a2bf517b570fe20b1ee1070668a6270d6e11?ref=master&prId=2652"}, {"source": "securities@openeuler.org", "url": "https://atomgit.com/src-openeuler/iSulad/pull/812"}, {"source": "securities@openeuler.org", "url": "https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865"}], "sourceIdentifier": "securities@openeuler.org", "vulnStatus": "Deferred", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-61"}], "source": "securities@openeuler.org", "type": "Secondary"}]}

{}

{"affected": [{"configurations": [{"platform": ["linux"], "status": "affected", "versions": {"scheme": "semver", "value": "[0,2.1.6]"}}], "enrichment": {"confidence": 97.0, "confidence_source": "matching", "scores": [{"score": 97.0, "source": "matching"}]}, "original": {"product": "iSulad", "source": "cna", "vendor": "openEuler"}, "product": "isula", "vendor": "openeuler"}], "created": "2026-11-12T08:30:10.996509+00:00", "updated": "2026-11-13T03:00:07.556081+00:00", "vendors": ["openeuler", "openeuler$PRODUCT$isula"]}