CVE-2026-30892: Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation
crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u (--user) is incorrectly parsed. The value 1 is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.
Affected Software
Remediation
Recommended actions to resolve this vulnerability, in priority order.
- Upgrade
Upgrade
crunto a version that resolves this vulnerability.Fixed in 1.27
Event History
Frequently Asked Questions
What is the severity of CVE-2026-30892?
CVE-2026-30892 is rated as a high severity vulnerability due to its potential for privilege escalation.
How do I fix CVE-2026-30892?
To fix CVE-2026-30892, upgrade crun to version 1.27 or later.
What versions are affected by CVE-2026-30892?
CVE-2026-30892 affects crun versions from 1.19 to 1.26.
What is the main issue with CVE-2026-30892?
The main issue with CVE-2026-30892 is that the crun exec option '-u' incorrectly parses the value '1' as UID 0 and GID 0.
Who is impacted by CVE-2026-30892?
Users of crun versions 1.19 through 1.26 are impacted by CVE-2026-30892 due to the privilege escalation vulnerability.