CLEANSTART-2026-QE30888: runc is a CLI tool for spawning and running containers according to the OCI specification

Q: What access and conditions does an attacker need to exploit this issue?

The severity vector indicates local access is required, along with low-level privileges and user interaction. Exploitation is rated high complexity, so additional conditions beyond basic local access are expected.

Q: What is the potential impact if exploitation succeeds?

The issue is rated as having high impact on confidentiality, integrity, and availability. The vector also indicates a scope change, meaning the security impact can extend beyond the initially affected security authority.

Q: Can affected versions or default configuration exposure be determined from this advisory?

No. The provided advisory identifies cleanstart/kubernetes as affected but does not provide version ranges, fixed releases, configuration prerequisites, or mitigation guidance.

Published Nov 11, 2026

Updated

Security vulnerability affects the kubernetes package. runc is a CLI tool for spawning and running containers according to the OCI specification.

Affected Software

1 affected componentFixes available

cleanstart/kubernetes<1.34.13-r2

1.34.13-r2

Remediation

Recommended actions to resolve this vulnerability, in priority order.

Upgrade
Upgrade cleanstart/kubernetes to a version that resolves this vulnerability.
Fixed in 1.34.13-r2

Event History

Nov 11, 2026

Advisory Published

via OSV·12:37 AM

Data Sourced

via OSV·12:37 AM

DescriptionSeverityAffected Software

Child vulnerabilities

Contains the following vulnerabilities.

CVE-2025-52881

Frequently Asked Questions

What access and conditions does an attacker need to exploit this issue?

The severity vector indicates local access is required, along with low-level privileges and user interaction. Exploitation is rated high complexity, so additional conditions beyond basic local access are expected.

What is the potential impact if exploitation succeeds?

The issue is rated as having high impact on confidentiality, integrity, and availability. The vector also indicates a scope change, meaning the security impact can extend beyond the initially affected security authority.

Can affected versions or default configuration exposure be determined from this advisory?

No. The provided advisory identifies cleanstart/kubernetes as affected but does not provide version ranges, fixed releases, configuration prerequisites, or mitigation guidance.

CLEANSTART-2026-QE30888: runc is a CLI tool for spawning and running containers according to the OCI specification

Affected Software

Remediation

Event History

Child vulnerabilities

Frequently Asked Questions

What access and conditions does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Can affected versions or default configuration exposure be determined from this advisory?

Company

Resources

Contact

Frequently Asked Questions

What access and conditions does an attacker need to exploit this issue?

What is the potential impact if exploitation succeeds?

Can affected versions or default configuration exposure be determined from this advisory?