Live › vulnerability › CVE-2026-16460
Go to dashboardbootc and ostree finalize already-staged OS deployments without rechecking the container image against the current signature policy. Unsigned OS content staged under an older, permissive policy can still boot after the policy is tightened, which gives an attacker full host compromise on reboot.
Summary written from the sources below. Check the originals before acting.
First seen by InfraStack 2026-10-23 21:57 UTC. All times on this page are UTC.
Image-mode Linux hosts running bootc or ostree (including Red Hat Hardened Images and OpenShift nodes) that staged an OS image while the container signature policy was permissive and later tightened it. Exploitation needs local access or the ability to get unsigned content staged (e.g. a pushed mutable tag pulled by an upgrade); the stale staged deployment then boots on reboot. Hosts that never staged unsigned content, or clear staged deployments after hardening policy, can skip it.
| Product | Ecosystem | Affected | Fixed in |
|---|---|---|---|
| bootc | vendor | unknown | – |
| ostree | vendor | unknown | – |
bootc status (and ostree admin status) and look for a staged deployment; if one exists and was pulled while /etc/containers/policy.json allowed unsigned images, treat as exposedbootc upgrade so it restages under the new policy, or ostree admin undeploy the pending one) before rebooting, and never stage unsigned imagesEach row is the first time that source carried this signal. The analyst’s rows are its own findings.
A flaw was found in bootc and ostree. Already-staged deployments are finalized without revalidating the deployment's container image against the current containers signature policy. Unsigned OS content staged under a prior permissive policy can remain bootable after policy is hardened to reject unsigned images, leading to full host compromise on reboot.
This page as .md · .json · in your agent: get_signal("CVE-2026-16460")
NVD data is provided by NIST and is public domain. Posts quoted belong to their authors.