CVE-2026-111435: Path Traversal
Relative path traversal vulnerability in openEuler iSulad on Linux.
This vulnerability is associated with program file src/daemon/modules/image/oci/ociload.c.
This issue affects iSulad: through 2.1.6.
In ociload.c, ociloadprocessmanifest() does not sanitize the Config path of manifest.json. A malicious tar package can enable the isulad with the root permission to read any file on the host.
Event History
Frequently Asked Questions
What must an attacker provide to trigger the issue?
The attacker needs to supply a malicious tar package containing a manifest.json with a crafted Config path. Exploitation requires that package to be processed by iSulad.
What is the practical impact on an affected host?
The crafted path can cause iSulad, running with root permission, to read arbitrary files from the host. The provided severity vector indicates high confidentiality impact, with no integrity or availability impact listed.