crun vulnerabilities

2 known vulnerabilities in crun from Containers. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.8 High severity

  crun: Improper Privilege Management

  CVE-2026-30892Mar 26, 2026Containers

  crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process

• 8.5 High severity

  crun: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-24965Feb 19, 2025Containers

  crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are nee