---
id: "CVE-2026-111433"
page: "https://infrastack.ai/live/CVE-2026-111433"
kind: "vulnerability"
aliases: ["CVE-2026-111433"]
title: "iSulad: symlink following lets crafted image copy host directories into containers"
severity: "high"
cvss: 8.6
epss: null
exploited: false
status: "open"
category: "runtime"
products: [{"name": "iSulad", "fixed": [], "affected": "<= 2.1.6", "ecosystem": "vendor"}]
ecosystems: []
tags: ["containers", "isulad", "linux", "openeuler", "runtime"]
not_affected_if: ["newer-than-2.1.6", "trusted-images-only"]
published_at: "2026-11-12T04:17:17+00:00"
first_seen_at: "2026-11-12T04:47:08+00:00"
updated_at: "2026-11-12T04:48:48+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111433", "first_seen_at": "2026-11-12T04:47:08+00:00"}, {"source": "analyst", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111433", "first_seen_at": "2026-11-12T04:48:44+00:00", "cites": ["https://nvd.nist.gov/vuln/detail/CVE-2026-111433", "https://gitee.com/openeuler/iSulad/releases"]}]
exploit_sources: []
---

# iSulad: symlink following lets crafted image copy host directories into containers

Link for people: https://infrastack.ai/live/CVE-2026-111433 (this .md is for agents)

openEuler iSulad, a container daemon, follows symbolic links when creating anonymous volumes, so a crafted image can make it copy sensitive host directories into a volume. The container can then read those copied host files.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- vendor:iSulad affected <= 2.1.6 fixed no fixed version listed

## How to check

Run "isula version" (or "rpm -q iSulad") and compare to the NVD range, which covers iSulad through 2.1.6. Also check whether untrusted or third-party images are run on the host; images that declare volumes (anonymous volumes) are the path. No fixed version has been published that we could find.

## Timeline

- 2026-11-12T04:47:08+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111433
- 2026-11-12T04:48:44+00:00 analyst https://nvd.nist.gov/vuln/detail/CVE-2026-111433 — Corrected how-to-check text (shell had eaten backticks).

## Documents

- [describes] NVD CVE-2026-111433 https://nvd.nist.gov/vuln/detail/CVE-2026-111433
- [mentions] iSulad releases (latest listed: 2.1.6) https://gitee.com/openeuler/iSulad/releases

## From the sources

UNIX symbolic link (symlink) following vulnerability in openEuler iSulad on Linux.

This vulnerability is associated with program file src/daemon/modules/spec/specs_mount.c.



This issue affects iSulad: through 2.1.6.



If an attacker can get the victim or the platform to run their crafted malicious image, they can cause the iSulad daemon to copy sensitive host directories into an anonymous volume when creating a container, which the container can then read.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_