Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-113951

Quick assessment

Affected
Apple Container
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

如果攻击者能够向 Kubernetes 容器集群中容器的文件系统写入数据，他们便可以在 中植入一个执行凭据插件（exec credential plugin）。当有人使用 或 命令将集群的 kubeconfig 拉取到 macOS 主机，随后在该主机上针对该配置运行 时， 将会以 macOS 主机用户的身份执行该插件。这使得攻击者能够将不受信任的 Linux 容器内的文件系统访问权限，转化为在主机上执行任意命令的能力。此漏洞已在 Container 版本 1.5.0 中修复。

AI Predicted 9.8 Difficulty: Moderate
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-113951

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
N/A
Source: CVE Program / CVE List V5
Vulnerability Description
If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s write-config or create and then runs kubectl against it — turning filesystem access inside an untrusted Linux container into arbitrary command execution on the host. This vulnerability is addressed in Container version 1.5.0.
Source: CVE Program / CVE List V5
CVSS Information
N/A
Source: CVE Program / CVE List V5
Vulnerability Type
N/A
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Apple Container 0 ~ 1.5.0 -

II. Public POCs for CVE-2026-113951

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-113951

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-113951 (1)

IV. Related Vulnerabilities

Same product: Container
Same vendor: Apple

V. Comments for CVE-2026-113951

No comments yet

Leave a comment