---
id: "CVE-2026-111435"
page: "https://infrastack.ai/live/CVE-2026-111435"
kind: "vulnerability"
aliases: ["CVE-2026-111435"]
title: "iSulad: crafted image tarball lets attacker read any host file"
severity: "high"
cvss: 7.4
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: [{"name": "iSulad", "fixed": [], "affected": "", "ecosystem": "runtime"}]
ecosystems: ["runtime"]
tags: ["containers", "infrastructure", "isulad", "linux", "openeuler", "untrusted-image"]
not_affected_if: ["no-untrusted-images", "not-using-isulad"]
published_at: "2026-11-12T04:17:17+00:00"
first_seen_at: "2026-11-12T04:47:08+00:00"
updated_at: "2026-11-12T04:48:58+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-111435", "first_seen_at": "2026-11-12T04:47:08+00:00"}, {"source": "analyst", "url": null, "first_seen_at": "2026-11-12T04:48:58+00:00"}]
exploit_sources: []
---

# iSulad: crafted image tarball lets attacker read any host file

Link for people: https://infrastack.ai/live/CVE-2026-111435 (this .md is for agents)

iSulad, the openEuler container runtime daemon, does not sanitize the Config path inside a manifest.json when loading an OCI image. A malicious tar package can make the daemon, which runs as root, read any file on the host.

_Summary, check and fix written by a model from the sources; labelled as such._

## Affected

- runtime:iSulad affected range not listed fixed no fixed version listed

## How to check

Run 'rpm -q iSulad' or 'isulad --version'. The triage summary gives an affected range through 2.1.6, but no vendor page was read to confirm it. Also check whether anything on the host runs 'isula load' on tarballs you did not build yourself. Fixed version: unknown. Check the openEuler security center (openeuler.org/en/security/cve) and the iSulad repo for a patch.

## Timeline

- 2026-11-12T04:47:08+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-111435
- 2026-11-12T04:48:58+00:00 analyst — Could not read NVD (empty page), openEuler CVE page (no data) or any vendor advisory/fix commit; fixed version and exact range remain unknown. Nothing verified. Searched web for advisory, none found.

## From the sources

Relative path traversal vulnerability in openEuler iSulad on Linux.

This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c.



This issue affects iSulad: through 2.1.6.



In oci_load.c, oci_load_process_manifest() does not sanitize the Config path of manifest.json. A malicious tar package can enable the isulad with the root permission to read any file on the host.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_