CVE-2026-47243 kata-containers CVE debrief

Who should care

Defenders responsible for systems using Kata Containers for isolation should assess exposure, particularly those with untrusted guest workloads. This includes cloud providers, containerization platform administrators, and security teams managing virtualized environments.

Why it matters

This critical vulnerability in Kata Containers allows an attacker with root-equivalent access inside the guest to escape to the host and potentially execute arbitrary code as host root. Defenders should prioritize upgrading to version 3.31.0 or later and assess systems using Kata Containers for exposure.

• Potential execution of arbitrary code as host root
• Creation of root-owned symlinks in sensitive host locations
• Bypass of guest virtio-fs client security controls
• Elevation of privileges from guest root to host root

Technical summary

The runtime-rs standalone virtio-fs path in Kata Containers is vulnerable to a guest-root to host-root escape due to the use of --sandbox none --seccomp none with the host virtiofsd. An attacker with root-equivalent access inside the guest can bypass the guest virtio-fs client and submit raw FUSE requests directly to the host virtiofsd, potentially leading to the creation of root-owned symlinks in sensitive host locations.

Defensive priority

Defenders should prioritize upgrading to Kata Containers version 3.31.0 or later to mitigate this vulnerability. Systems using Kata Containers for isolation should be assessed for exposure, particularly those with untrusted guest workloads.

Recommended defensive actions

• Upgrade to Kata Containers version 3.31.0 or later
• Assess systems using Kata Containers for exposure, particularly those with untrusted guest workloads
• Monitor for suspicious activity related to virtio-fs and FUSE requests
• Review compensating controls for exposed systems while remediation is scheduled and verified
• Check relevant monitoring, detection, and logs for exposed assets that need extra review
• Track exceptions, retest remediated assets, and close the item only after evidence is documented
• Confirm whether affected product deployments exist in managed environments and assign an owner for follow-up

Evidence notes

The CVE record and NVD entry provide details on the vulnerability, including its CVSS score of 9.2 and severity of CRITICAL. The issue is fixed in Kata Containers version 3.31.0. Evidence from the CVE Program and NVD suggests that defenders should verify affected systems and upgrade to the latest version. The vulnerability allows guest-root to host-root escape, potentially leading to arbitrary code execution as host root. Limited evidence is available on affected scope and exploitation, but defenders should assess exposure, especially

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.