A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.usepasst), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun >= 1.29

A flaw was found in crun. When crun is built with libkrun and a container is started rootful with passt networking (krun.usepasst), crun can execute attacker-controlled payload from the container image with host root privileges. The issue is a regression in crun 1.29. It affects crun 1.29 and 1.29.1. A patch is available upstream; no fixed release is published yet.

A flaw was found in crun. After pivotroot or chroot, crun reopens /dev/null for stdio without preventing symlink follows. If /dev is not mounted and a malicious image replaces /dev/null with a symlink, crun can open a host bind-mounted file and a non-root container process can write to it and chown it. Affected versions are crun 1.29.1 and earlier. This is a separate issue from CVE-2026-47766 and from the /dev/console symlink flaw. No fixed release is published yet.