Executive brief
Kata Containers is a container runtime designed for secure, isolated container execution. In deployments using genpolicy for Confidential Containers, a malicious host operator can exploit weak validation of storage mount rules to mount arbitrary paths over sensitive locations or inject attacker-controlled content. This could lead to exposure of confidential information from the guest environment or enable injection of malicious code into containers.
Technical details
The vulnerability exists in Kata Containers' genpolicy configuration for Confidential Containers, specifically in the validation of CreateContainer mount and storage rules (CWE-73: External Control of File Name or Path). A host operator with low privileges can bypass insufficient validation to mount arbitrary container-rootfs paths over sensitive host locations or provision arbitrary storage content. The attack requires network access and low privileges but no user interaction. An attacker can achieve both confidentiality and integrity violations, potentially reading sensitive files, modifying system files, or executing unauthorized code. A patch is available in the upstream repository.
Affected products
- Kata Containers Kata Containers
Timeline
- 2026-08-20: disclosed
- 2026-08-20: advisory