---
id: "CVE-2026-95614"
page: "https://infrastack.ai/live/CVE-2026-95614"
kind: "vulnerability"
aliases: ["CVE-2026-95614"]
title: "Zenitel Connect: container writes can run commands as host root"
severity: "critical"
cvss: 9.3
epss: null
exploited: false
status: "open"
category: "infrastructure"
products: []
ecosystems: []
tags: ["hiatus", "infrastructure", "rsyslog", "self-hosted", "zenitel-connect"]
not_affected_if: ["version-1.11.0-or-later"]
published_at: "2026-11-13T16:19:38+00:00"
first_seen_at: "2026-11-13T16:47:35+00:00"
updated_at: "2026-11-13T16:48:11+00:00"
sources: [{"source": "nvd", "url": "https://nvd.nist.gov/vuln/detail/CVE-2026-95614", "first_seen_at": "2026-11-13T16:47:35+00:00"}]
exploit_sources: []
---

# Zenitel Connect: container writes can run commands as host root

Link for people: https://infrastack.ai/live/CVE-2026-95614 (this .md is for agents)

Zenitel Connect before 1.11.0 applies an rsyslog configuration file from a data volume shared with the hiatus container. An attacker who can write to that container's filesystem can plant a crafted rsyslog config and run arbitrary OS commands as root on the host.

_Summary, check and fix written by a model from the sources; labelled as such._

## How to check

- Check the installed Zenitel Connect version; it is affected below `1.11.0`.
- Look for a shared data volume mounted into the `hiatus` application container.

## Fix

- Zenitel Connect: move to `1.11.0` or later.

## Timeline

- 2026-11-13T16:47:35+00:00 nvd https://nvd.nist.gov/vuln/detail/CVE-2026-95614

## From the sources

The host configuration watcher in Zenitel Connect before 1.11.0 applies a rsyslog configuration file written to a data volume that is shared with the hiatus application container, which allows local attackers with write access to the hiatus container filesystem to execute arbitrary OS commands as root on the host operating system via a crafted rsyslog configuration file.

---

_Free to read, with fair use of about 60 pages a minute. For higher limits or API access: sales@infrastack.ai_