{"id":"CVE-2026-111435","kind":"vulnerability","aliases":["CVE-2026-111435"],"related":[],"title":"iSulad: crafted image tarball lets attacker read any host file","description":"Relative path traversal vulnerability in openEuler iSulad on Linux.\n\nThis vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c.\n\n\n\nThis issue affects iSulad: through 2.1.6.\n\n\n\nIn oci_load.c, oci_load_process_manifest() does not sanitize the Config path of manifest.json. A malicious tar package can enable the isulad with the root permission to read any file on the host.","summary":"iSulad, the openEuler container runtime daemon, does not sanitize the Config path inside a manifest.json when loading an OCI image. A malicious tar package can make the daemon, which runs as root, read any file on the host.","severity":"high","cvss":7.4,"epss":null,"exploited":false,"exploited_at":null,"products":[{"name":"iSulad","fixed":[],"affected":"","ecosystem":"runtime"}],"ecosystems":["runtime"],"tags":["containers","infrastructure","isulad","linux","openeuler","untrusted-image"],"not_affected_if":["no-untrusted-images","not-using-isulad"],"how_to_check":"Run 'rpm -q iSulad' or 'isulad --version'. The triage summary gives an affected range through 2.1.6, but no vendor page was read to confirm it. Also check whether anything on the host runs 'isula load' on tarballs you did not build yourself. Fixed version: unknown. Check the openEuler security center (openeuler.org/en/security/cve) and the iSulad repo for a patch.","fix":null,"status":"open","published_at":"2026-11-12T04:17:17+00:00","first_seen_at":"2026-11-12T04:47:08+00:00","triaged_at":"2026-11-12T04:47:45+00:00","updated_at":"2026-11-12T04:48:58+00:00","category":"infrastructure","confidence":0.4,"triage":{"at":"2026-11-12T04:47:45Z","model":"claude-haiku-5-5","output":{"fix":"unknown","reach":"local","title":"iSulad: crafted image tarball lets attacker read any host file","impact":"high","summary":"iSulad, the openEuler container runtime daemon, does not sanitize the Config path inside a manifest.json when loading an OCI image. A malicious tar package can make the daemon, which runs as root, read any file on the host.","audience":"businesses","category":"infrastructure","nicknames":[],"who_cares":["isulad","openeuler","linux","containers"],"confidence":0.6,"fix_status":"unknown","needs_auth":"unknown","worst_case":"Daemon running as root reads arbitrary files on the host","analyst_note":"Confirm the fixed version and the exact trigger (untrusted tar load via the image load path) from the openEuler advisory or the NVD entry.","how_to_check":"- Check the installed iSulad version against the affected range (through `2.1.6`).\n- Look for the `isulad` binary or package on hosts, for example with `isulad --version` or `rpm -q iSulad`.\n- Note whether the daemon loads image tarballs from untrusted sources.","plain_action":"","product_name":"iSulad","needs_analyst":true,"not_affected_if":["no-untrusted-images","not-using-isulad"],"who_is_affected":"Hosts running iSulad through 2.1.6 on Linux, especially those that load OCI image tarballs from sources not fully trusted. The sources do not describe a default configuration that makes it exposed, and they do not say whether a remote attacker can deliver a tarball without help.","user_interaction":"yes","product_ecosystem":"runtime","needs_special_setup":"unknown","severity_if_unknown":"high"},"cost_usd":0.000752,"input_tokens":4583,"output_tokens":588,"severity_before":"high"},"analyst_status":"done","analyst_note":"Confirm the fixed version and the exact trigger (untrusted tar load via the image load path) from the openEuler advisory or the NVD entry.","search":"'-111435':13A,16A '-2026':12A,15A '2.1.6':86C 'affect':83C 'associ':76C 'attack':6A 'config':36B,98C 'contain':18B,29B 'craft':2A 'cve':11A,14A 'daemon':31B,53B 'enabl':107C 'file':10A,60B,79C,117C 'host':9A,63B,120C 'imag':3A,25B,45B 'infrastructur':19B 'insid':38B 'issu':82C 'isulad':1A,17A,20B,26B,70C,84C,109C 'let':5A 'linux':21B,72C 'load':42B,91C 'load.c':89C 'make':51B 'malici':47B,103C 'manifest':93C 'manifest.json':40B,101C 'oci':44B,88C,90C 'openeul':22B,28B,69C 'packag':49B,105C 'path':37B,65C,99C 'permiss':113C 'process':92C 'program':78C 'read':7A,58B,115C 'relat':64C 'root':57B,112C 'run':55B 'runtim':30B 'sanit':34B,96C 'src/daemon/modules/image/oci/oci_load.c':80C 'tar':48B,104C 'tarbal':4A 'travers':66C 'untrust':24B 'untrusted-imag':23B 'vulner':67C,74C","nicknames":[],"mitigations":[],"who_affected":"Hosts running iSulad through 2.1.6 on Linux, especially those that load OCI image tarballs from sources not fully trusted. The sources do not describe a default configuration that makes it exposed, and they do not say whether a remote attacker can deliver a tarball without help.","tier":"B","verified":{},"analyst_revisit_at":null,"fix_status":"unknown","audience":"developers","plain_action":null,"pkeys":["isulad"],"ptokens":["isulad"],"labels":["containers","high","infrastructure","isulad","linux","openeuler","runtime","untrustedimage"],"campaign_type":null,"search_a":"'-111435':13A,16A '-2026':12A,15A 'attack':6A 'craft':2A 'cve':11A,14A 'file':10A 'host':9A 'imag':3A 'isulad':1A,17A 'let':5A 'read':7A 'tarbal':4A","search_b":"'config':36B 'contain':18B,29B 'daemon':31B,53B 'file':60B 'host':63B 'imag':25B,45B 'infrastructur':19B 'insid':38B 'isulad':20B,26B 'linux':21B 'load':42B 'make':51B 'malici':47B 'manifest.json':40B 'oci':44B 'openeul':22B,28B 'packag':49B 'path':37B 'read':58B 'root':57B 'run':55B 'runtim':30B 'sanit':34B 'tar':48B 'untrust':24B 'untrusted-imag':23B","search_c":"'2.1.6':86C 'affect':83C 'associ':76C 'config':98C 'enabl':107C 'file':79C,117C 'host':120C 'issu':82C 'isulad':70C,84C,109C 'linux':72C 'load':91C 'load.c':89C 'malici':103C 'manifest':93C 'manifest.json':101C 'oci':88C,90C 'openeul':69C 'packag':105C 'path':65C,99C 'permiss':113C 'process':92C 'program':78C 'read':115C 'relat':64C 'root':112C 'sanit':96C 'src/daemon/modules/image/oci/oci_load.c':80C 'tar':104C 'travers':66C 'vulner':67C,74C","cause_entry":null,"cause_path":null,"disclosures_checked_at":null,"first_public_at":"2026-11-12T04:17:17+00:00","kev":null,"cvss_vector":"CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N","cvss_by":"securities@openeuler.org","poc_count":0,"sources":[{"source":"nvd","external_id":"CVE-2026-111435","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-111435","severity":null,"published_at":"2026-11-12T04:17:17+00:00","modified_at":"2026-11-12T04:17:17+00:00","first_seen_at":"2026-11-12T04:47:08+00:00","fetched_at":"2026-11-12T04:47:08+00:00","note":null},{"source":"analyst","external_id":"CVE-2026-111435:3705","url":null,"severity":null,"published_at":"2026-11-12T04:48:58+00:00","modified_at":"2026-11-12T04:48:58+00:00","first_seen_at":"2026-11-12T04:48:58+00:00","fetched_at":"2026-11-12T04:48:58+00:00","note":"Could not read NVD (empty page), openEuler CVE page (no data) or any vendor advisory/fix commit; fixed version and exact range remain unknown. Nothing verified. Searched web for advisory, none found."}],"documents":[],"disclosures":[],"exploit_sources":[],"notice":"Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai"}