Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-15801— Cri-o: cri-o: insufficient validation during container checkpoint restore

Quick assessment

Affected
Red Hat Red Hat OpenShift Container Platform 4
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 CRI-O 中发现了一个与容器检查点（checkpoint）和恢复（restore）功能相关的漏洞。当 CRI-O 配置为从检查点存档中恢复容器时，如果对恢复元数据的验证不充分，可能允许具备相应权限的用户在主机文件系统上执行非预期操作。成功利用该漏洞需要启用容器的检查点与恢复功能，而这并非默认配置。此外，攻击者还必须能够触发从不可信的检查点内容中恢复容器。

CVSS 8.0 · High EPSS 0.48% · P42

Affected Version Matrix 2

VendorProduct Version RangeStatus
Red Hat Red Hat OpenShift Container Platform 4 any affected
Red Hat Red Hat OpenShift Container Platform 5 any affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-15801

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Cri-o: cri-o: insufficient validation during container checkpoint restore
Source: CVE Program / CVE List V5
Vulnerability Description
A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host filesystem. Successful exploitation requires that container checkpoint and restore functionality is enabled, which is not the default configuration. An attacker must also be able to trigger restoration of a container from untrusted checkpoint content.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
对路径名的限制不恰当(路径遍历)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat OpenShift Container Platform 4 - cpe:/a:redhat:openshift:4
Red Hat Red Hat OpenShift Container Platform 5 - cpe:/a:redhat:openshift:5

II. Public POCs for CVE-2026-15801

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-15801

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-15801 (2)

Same Patch Batch · Red Hat · 2026-09-21 · 12 CVEs total

CVE-2026-80110 8.1 HIGH Pki-core: dogtag pki v2 rest acl filter's reverse-lexicographic tie-break lets a ca agent
CVE-2026-94449 7.5 HIGH Quarkus-smallrye-fault-tolerance: quarkus-smallrye-fault-tolerance: memory leak in @applyg
CVE-2026-75939 7.4 HIGH Openshift/oc-mirror: release signature verification: openpgp signatureerror checked before
CVE-2026-94368 7.1 HIGH Noobaa-core: noobaa-core: presigned put url escalation to copyobject via unsigned x-amz-co
CVE-2026-94215 5.5 MEDIUM Keycloak-services: keycloak-services: cross-realm client read/write via request-level cach
CVE-2026-93433 5.5 MEDIUM Libstoragemgmt: libstoragemgmt: denial of service via stack buffer overflow in scsi vpd pa
CVE-2026-94184 5.3 MEDIUM Fetchmail: fetchmail: stack-based buffer overflow in ntlm authentication (fetchmail-sa-202
CVE-2026-94213 4.9 MEDIUM Keycloak-services: keycloak-services: authorization services policy evaluation endpoint le
CVE-2026-92382 4.1 MEDIUM Usbredir: usbredir: unbounded iso_packet_desc[] index in usbredirhost_iso_packet() leads t
CVE-2026-94217 3.5 LOW Keycloak-services: keycloak-services: uma scope merge across resource owners via resource
CVE-2026-94218 3.1 LOW Keycloak-services: keycloak-services: 2fa setup enforcement bypass via authentication sess

IV. Related Vulnerabilities

Same product: Red Hat OpenShift Container Platform 4
Same vendor: Red Hat
Same weakness: CWE-22