kata-containers 4.0.0 Patch: mem-agent tRPC Authorization Bypass in Confidential Containers

Vulnerability Overview Title: kata-agent mem-agent tRPC methods are not subject to agent-policy enforcement, letting an untrusted host tamper with confidential-guest memory management Description: In Confidential Containers (CoCo) deployments, kata-agent enforces an OPA/Rego-based AgentPolicy that must authorize every tRPC API call for execution. This policy serves as a security barrier preventing untrusted hosts from stealing data from confidential workloads. The two tRPC methods introduced in mem-agent lack this authorization check, allowing an untrusted host to bypass guest policy configurations unconditionally. When mem-agent is enabled (which is the default), this permits the host to degrade availability and performance under the control of an attacker through forced swapping, aggressive eviction, or compression, without being constrained by policy boundaries, thereby impacting confidential workloads. Impact Scope Affected Versions: <= 3.3.1 Fixed Version: 4.0.0 Severity: 5.7 / 10 CVSS v3 Base Metrics: - Attack Vector: Local - Attack Complexity: Low - Privileges Required: None - User Interaction: None - Scope: Changed - Confidentiality: None - Integrity: Low - Availability: Low Remediation Fix Measures: Added the missing authorization checks to the affected tRPC handlers. Additionally, added corresponding default-deny entries to the rules and shipped reference policies for these methods. As a defense-in-depth measure, CI checks will verify that every RPC decision in the agent protocol has a policy gate in the handler, and that a default rule exists in the policy files to prevent similar omissions in the future. Contributors: Suoer / Tarmo Technologies Additional Information Release Date: 3 weeks ago Author: stevenhorsman Repository: kata-containers/kata-containers Labels: Security, Advisories, GHSA-h8jv-63p2-496x Code Block No POC code or exploit code is included on the page.

Goal Reached Thanks to every supporter — we hit 100%!

kata-containers 4.0.0 Patch: mem-agent tRPC Authorization Bypass in Confidential Containers

More from this source