← Database

CVE-2024-5154

HIGH CVSS: 8.1 Published: 2024-06-12 Modified: 2026-06-17

Description

A flaw was found in cri-o. A malicious container can create a symbolic link to arbitrary files on the host via directory traversal (“../“). This flaw allows the container to read and write to arbitrary files on the host system.

Affected Platforms

Kubernetes Cri-ORedhat Enterprise LinuxRedhat Openshift Container Platform

Weakness Type

CWE-22, CWE-22

References