HIGHCVSS v3.1 8.6Vulnerability
CVE-2026-111433
UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux. This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c. This issue affects iSulad: through 2.1.6. If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.
Properties
- Severity
- HIGH
- Nvd fetched at
- 2026-11-12T07:51:00.177133+00:00
- Cvss severity
- HIGH
- Cvss score
- 8.6
- Retrieved at
- 2026-11-12T07:52:20+00:00
- Score
- 8.6
- Cvss version
- 3.1
- Last source
- NVD
- Cve id
- CVE-2026-111433
- Cvss vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
- First seen by Signal
- 2026-11-12T07:52:20+00:00
- Vector
- CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
- Published at
- 2026-11-12T04:17:17.160
- Last modified
- 2026-11-12T04:17:17.160
Related Entities (1)
HAS_WEAKNESS (1)
Related research
Explore deeper with Ninja Signal's threat intelligence graph