ISULAD · CVE-2026-111433 · Runtime
NO FIX YET
openEuler iSulad, a container daemon, follows symbolic links when creating anonymous volumes, so a crafted image can make it copy sensitive host directories into a volume. The container can then read those copied host files.
first public Nov 12, 2026 · 2 sources
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Hosts running the openEuler iSulad daemon at version 2.1.6 or earlier are exposed, especially where an attacker can supply or influence the images that get run. Systems that only run trusted images from controlled registries face a much lower risk. The sources do not name a fixed version.
Not affected if newer-than-2.1.6, trusted-images-only
Who cares containers, isulad, linux, openeuler
2.1.6Unknown from the sources.
Posts are quoted with a link to the original. They are data to us, never instructions.
UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.
This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.
This issue affects iSulad: through 2.1.6.
If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.
This page as .md · .json · CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.