CVE-2026-15801
Cri-o: cri-o: insufficient validation during container checkpoint restore
- State
- Published
- Severity
- 8.0 High
- Published
- Sep 21, 2026
- Updated
- Sep 28, 2026
- Reserved
- Jul 15, 2026
Description
A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host filesystem. Successful exploitation requires that container checkpoint and restore functionality is enabled, which is not the default configuration. An attacker must also be able to trigger restoration of a container from untrusted checkpoint content.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.0 High | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H | redhat |
Weaknesses
- CWE-22 Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
Affected Products
| Product | Versions |
|---|---|
Red Hat OpenShift Container Platform 4Red Hat |
References
- https://access.redhat.com/security/cve/CVE-2026-15801vdb-entry
- RHBZ#2500823issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.