← Vulnerability feed

Vulnerability record · CVE-2026-44210 · published 23 July 2026

CVE-2026-44210: Katacontainers kata containers argument injection vulnerability

Katacontainers · Kata Containers

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Versions prior to 3.31.0 ship with a default configuration that allows pod creators to inject arbitrary command-line arguments into the virtiofsd process through the `io.katacontainers.config.hypervisor.virtio_fs_extra_args` pod annotation. By injecting `-o source=/` along with `--no-announce-submounts` and `--sandbox=none`, an attacker can override the virtiofsd shared directory to serve the entire host root filesystem into the guest VM. Combined with the `kernel_params` annotation (also enabled by default) to activate the agent debug console, the attacker can mount the host filesystem from inside the VM and read or write any file on the host, including /etc/shadow. Version 3.31.0 patches the issue.

5.8 CVSS 4.0 Medium EPSS 0.59% · top 53.8% CWE-88 · Argument injection
5.8CVSS 4.0 base score
0.59%EPSS exploitation probability, 30 days
NoNot in CISA KEV
1Affected product versions listed by NVD
3References, 2 tagged exploit
6 Aug 2026Last modified by NVD

Description

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Versions prior to 3.31.0 ship with a default configuration that allows pod creators to inject arbitrary command-line arguments into the virtiofsd process through the `io.katacontainers.config.hypervisor.virtio_fs_extra_args` pod annotation. By injecting `-o source=/` along with `--no-announce-submounts` and `--sandbox=none`, an attacker can override the virtiofsd shared directory to serve the entire host root filesystem into the guest VM. Combined with the `kernel_params` annotation (also enabled by default) to activate the agent debug console, the attacker can mount the host filesystem from inside the VM and read or write any file on the host, including /etc/shadow. Version 3.31.0 patches the issue.

CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:N/VA:N/SC:H/SI:H/SA:H/E:P/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:

Affected products

1 vulnerable configurations from NVD's CPE data, grouped by vendor and product.

References

LinkTags
https://github.com/kata-containers/kata-containers/commit/ffa59ce3aa7877d067c9a372df0c329a23a01744 Patch
https://github.com/kata-containers/kata-containers/security/advisories/GHSA-rr59-xxvx-96qr ExploitVendor Advisory
https://github.com/kata-containers/kata-containers/security/advisories/GHSA-rr59-xxvx-96qr ExploitVendor Advisory

Track CVE-2026-44210 inside VULONE

Watch it alongside the ransomware crews, C2 infrastructure and forum chatter that reference it, query it through the API and pull it into your SIEM over TAXII.

Start free Open in platform

Related vulnerabilities

Same products first, then exploited flaws of the same weakness class.

8.8CVE-2026-24834Katacontainers kata containers incorrect permission assignment vulnerabilityKata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. I…EPSS 0.22%8.8CVE-2026-24054Katacontainers kata containers vulnerabilityKata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. I…EPSS 0.50%8.8CVE-2020-27151Katacontainers kata containers vulnerabilityAn issue was discovered in Kata Containers through 1.11.3 and 2.x through 2.0-rc1. The runtime will execute binaries given using annotations without …EPSS 2.0%8.2CVE-2026-41326Katacontainers confidential containers vulnerabilityKata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. F…EPSS 0.37%9.2CVE-2026-86060MikroTik RouterOS SSH login argument injection privilege escalationRouterOS mishandles arguments in the SSH login path when a username begins with a prohibited character, allowing the trusted policy mask to be altere…KEVEPSS 1.8%analysed9.8CVE-2026-24061GNU Inetutils telnetd argument injection allows remote auth bypasstelnetd in GNU Inetutils through 2.7 fails to sanitize the USER environment variable, so a value such as "-f root" is passed as an argument to login …KEVEPSS 99%analysed9.8CVE-2016-10033PHPMailer isMail mailSend argument injection enables remote code executionPHPMailer before 5.2.18 fails to properly sanitize the Sender property in the mailSend function of the isMail transport, allowing a crafted backslash…KEVEPSS 100%analysed7.2CVE-2024-41710Mitel SIP Phones argument injection in boot processMitel 6800, 6900 and 6900w Series SIP Phones (including the 6970 Conference Unit) through R6.4.0.HF1 fail to sanitize parameters during the boot proc…KEVEPSS 42%analysed

Source: NIST National Vulnerability Database (record CVE-2026-44210), CISA KEV, FIRST EPSS (scores of 2026-09-27). This page is refreshed as NVD updates the record.