{"id":"CVE-2026-111433","kind":"vulnerability","aliases":["CVE-2026-111433"],"related":[],"title":"iSulad: symlink following lets crafted image copy host directories into containers","description":"UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nIf an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.","summary":"openEuler iSulad, a container daemon, follows symbolic links when creating anonymous volumes, so a crafted image can make it copy sensitive host directories into a volume. The container can then read those copied host files.","severity":"high","cvss":8.6,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"iSulad","fixed":[],"affected":"<= 2.1.6","ecosystem":"vendor"}],"ecosystems":[],"tags":["containers","isulad","linux","openeuler","runtime"],"not_affected_if":["newer-than-2.1.6","trusted-images-only"],"how_to_check":"Run \"isula version\" (or \"rpm -q iSulad\") and compare to the NVD range, which covers iSulad through 2.1.6. Also check whether untrusted or third-party images are run on the host; images that declare volumes (anonymous volumes) are the path. No fixed version has been published that we could find.","fix":null,"status":"open","published_at":"2026-11-12T04:17:17+00:00","first_seen_at":"2026-11-12T04:47:08+00:00","triaged_at":"2026-11-12T04:47:40+00:00","updated_at":"2026-11-12T04:48:48+00:00","category":"runtime","confidence":0.5,"triage":{"at":"2026-11-12T04:47:40Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"iSulad: symlink following lets crafted image copy host directories into containers","impact":"high","summary":"openEuler iSulad, a container daemon, follows symbolic links when creating anonymous volumes, so a crafted image can make it copy sensitive host directories into a volume. The container can then read those copied host files.","audience":"businesses","category":"runtime","nicknames":[],"who_cares":["isulad","openeuler","containers","linux"],"confidence":0.6,"fix_status":"unknown","needs_auth":"no","worst_case":"container reads sensitive host directories copied into its volume","analyst_note":"Find the fixed iSulad version and vendor advisory for CVE-2026-111433; the NVD entry gives only the affected range through 2.1.6.","how_to_check":"- Check the installed iSulad version with `isula version` and compare it against the affected range through 2.1.6.\n- Review whether untrusted or third-party images are pulled and run on the host.","plain_action":"","product_name":"","needs_analyst":true,"not_affected_if":["newer-than-2.1.6","trusted-images-only"],"who_is_affected":"Hosts running the openEuler iSulad daemon at version 2.1.6 or earlier are exposed, especially where an attacker can supply or influence the images that get run. Systems that only run trusted images from controlled registries face a much lower risk. The sources do not name a fixed version.","user_interaction":"yes","product_ecosystem":"","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000723,"input_tokens":4603,"output_tokens":526,"severity_before":"high"},"analyst_status":"done","analyst_note":"Find the fixed iSulad version and vendor advisory for CVE-2026-111433; the NVD entry gives only the affected range through 2.1.6.","search":"'-111433':14A,17A '-2026':13A,16A '2.1.6':83C 'affect':80C 'anonym':34B,113C 'associ':73C 'attack':86C 'caus':102C 'contain':11A,19B,27B,51B,118C,121C 'copi':7A,43B,56B,107C 'craft':5A,38B,97C 'creat':33B,116C 'cve':12A,15A 'daemon':28B,105C 'directori':9A,46B,110C 'file':58B,76C 'follow':3A,29B,63C 'get':88C 'host':8A,45B,57B,109C 'imag':6A,39B,99C 'issu':79C 'isulad':1A,18A,20B,25B,67C,81C,104C 'let':4A 'link':31B,61C 'linux':21B,69C 'make':41B 'malici':98C 'openeul':22B,24B,66C 'platform':93C 'program':75C 'read':54B,124C 'run':95C 'runtim':23B 'sensit':44B,108C 'src/daemon/modules/spec/specs_mount.c':77C 'symbol':30B,60C 'symlink':2A,62C 'unix':59C 'victim':90C 'volum':35B,49B,114C 'vulner':64C,71C","nicknames":[],"mitigations":[],"who_affected":"Hosts running the openEuler iSulad daemon at version 2.1.6 or earlier are exposed, especially where an attacker can supply or influence the images that get run. Systems that only run trusted images from controlled registries face a much lower risk. The sources do not name a fixed version.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"businesses","plain_action":null,"pkeys":["isulad"],"ptokens":["isulad"],"labels":["containers","high","isulad","linux","openeuler","runtime"],"campaign_type":null,"search_a":"'-111433':14A,17A '-2026':13A,16A 'contain':11A 'copi':7A 'craft':5A 'cve':12A,15A 'directori':9A 'follow':3A 'host':8A 'imag':6A 'isulad':1A,18A 'let':4A 'symlink':2A","search_b":"'anonym':34B 'contain':19B,27B,51B 'copi':43B,56B 'craft':38B 'creat':33B 'daemon':28B 'directori':46B 'file':58B 'follow':29B 'host':45B,57B 'imag':39B 'isulad':20B,25B 'link':31B 'linux':21B 'make':41B 'openeul':22B,24B 'read':54B 'runtim':23B 'sensit':44B 'symbol':30B 'volum':35B,49B","search_c":"'2.1.6':83C 'affect':80C 'anonym':113C 'associ':73C 'attack':86C 'caus':102C 'contain':118C,121C 'copi':107C 'craft':97C 'creat':116C 'daemon':105C 'directori':110C 'file':76C 'follow':63C 'get':88C 'host':109C 'imag':99C 'issu':79C 'isulad':67C,81C,104C 'link':61C 'linux':69C 'malici':98C 'openeul':66C 'platform':93C 'program':75C 'read':124C 'run':95C 'sensit':108C 'src/daemon/modules/spec/specs_mount.c':77C 'symbol':60C 'symlink':62C 'unix':59C 'victim':90C 'volum':114C 'vulner':64C,71C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T04:17:17+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N","cvss_by":"securities@openeuler.org","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111433","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111433","severity":null,"published_at":"2026-11-12T04:17:17+00:00","modified_at":"2026-11-12T04:17:17+00:00","first_seen_at":"2026-11-12T04:47:08+00:00","fetched_at":"2026-11-12T04:47:08+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-111433:3706","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111433","severity":null,"published_at":"2026-11-12T04:48:44+00:00","modified_at":"2026-11-12T04:48:48+00:00","first_seen_at":"2026-11-12T04:48:44+00:00","fetched_at":"2026-11-12T04:48:48+00:00","note":"Corrected how-to-check text (shell had eaten backticks).","cites":["https://nvd.nist.gov/vuln/detail/CVE-2026-111433","https://gitee.com/openeuler/iSulad/releases"]}],"documents":[{"id":131957,"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111433","title":"NVD CVE-2026-111433","kind":"advisory","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"describes","confidence":null,"note":null},{"id":131958,"url":"https://gitee.com/openeuler/iSulad/releases","title":"iSulad releases (latest listed: 2.1.6)","kind":"release","source":"analyst","publisher":null,"text":null,"published_at":null,"relation":"mentions","confidence":null,"note":null}],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}