CVE-2026-47699

A flaw was found in guest-components. This vulnerability allows an attacker to achieve container escape and gain unauthorized access to the underlying pod virtual machine. When unpacking a crafted Open Container Initiative (OCI) image layer, the archive extraction routine fails to restrict hard links to the target destination directory. By supplying an image containing an absolute file path, an attacker can create hard links at arbitrary locations outside the extraction directory and compromise virtual machine capabilities.

This vulnerability is rated as having Critical impact because it enables a complete container escape into the surrounding confidential virtual machine, compromising hardware-backed pod isolation and attestation security. When extracting specially crafted container layers in confidential container environments, tar archive extraction logic allows unauthorized file creation outside the intended destination directory on the guest filesystem. An attacker must be capable of deploying or supplying an untrusted container image to the confidential guest to exploit this flaw.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.