CVE-2026-47766

A flaw was found in crun, an OCI Container Runtime. When processing an OCI bundle where the container root filesystem's /dev directory is a symbolic link and /dev is not explicitly mounted, crun incorrectly follows this symlink outside the container's intended boundaries. This allows a local attacker to create or overwrite device nodes and symlinks in arbitrary locations on the host system, potentially leading to privilege escalation or denial of service.

A flaw was found in crun's device setup routine. When processing an OCI container bundle where the rootfs "/dev" directory is configured as a symlink and "/dev" is not explicitly mounted, crun traverses the symlink without using O_NOFOLLOW. This allows crun to create default device nodes and stdio symlinks at the target path on the host filesystem outside the container boundary. A local attacker supplying a crafted bundle can overwrite existing host files or create unauthorized device nodes, potentially resulting in host denial of service, file corruption, or privilege escalation.

The CVSS score(s) listed for this vulnerability do not reflect the associated product's status, and are included for informational purposes to better understand the severity of this vulnerability.

Explicitly configure a dedicated "/dev" mount point inside the container bundle specification, or restrict untrusted users from deploying custom, unvetted OCI container bundles on the host.