ISULAD · CVE-2026-111434 · Runtime
NO FIX YET
The iSulad container daemon passes error text read from the isula shim's stderr pipe into a format function without a fixed format string. An attacker who can make the shim output format specifiers can leak memory contents, crash the daemon, or possibly perform arbitrary writes.
first public Nov 12, 2026 · 1 source
Check it with your coding agent
It reads this page and tells you if your code or app is affected.
Hosts running the openEuler iSulad container daemon with the isula runtime shim, where container create, start, exec or stop operations are performed. Sources do not state which shim outputs can be influenced by an attacker, so exposure depends on whether untrusted input can reach the shim's stderr. Teams not running iSulad can skip it.
Not affected if not-using-isulad
Who cares containers, isulad, linux, openeuler
isula version or the package manager, and compare it with the affected range through 2.1.6.No fix yet, per the sources.
Use of Externally-Controlled format string vulnerability in openEuler iSulad on Linux.
This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c.
This issue affects iSulad: through 2.1.6.
When the iSulad daemon performs container lifecycle operations (such as create, start, exec, stop, etc.) through the isula runtime (shim), the daemon reads the stderr output of the shim process via a pipe for error information display. If the buffer contains format specifiers such as %s, %x, or %n, it may trigger a format string vulnerability, potentially leading to information leakage, denial of service, or the risk of arbitrary writes.
This page as .md · .json · CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:L/I:L/A:H
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.
Are you affected?
Ask from here. InfraStack checks the affected versions against your stack and answers in your inbox.
InfraStack checks the affected versions against your stack and answers in Slack, with the evidence and the fix.
InfraStack checks it against your stack and answers on your report, with the evidence and the fix.