CVE-2026-41579

2 advisories.

Go/github.com/opencontainers/runc CVE-2026-41579: low 3.3, EPSS 0.19%

runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

Action: Upgrade github.com/opencontainers/runc to 1.3.6 or later.

go get github.com/opencontainers/runc@v1.3.6

go get github.com/opencontainers/runc@v1.4.3

go get github.com/opencontainers/runc@v1.5.0-rc.3

1.3.6

1.4.3

1.5.0-rc.3

CVE-2026-41579 · published 2026-06-22T20:01:35Z · modified 2026-09-10T03:51:09.778120218Z · JSON

Malicious image with /dev symlink can trigger limited host filesystem integrity violations in github.com/opencontainers/runc

Action: Upgrade github.com/opencontainers/runc to 1.3.6 or later.

go get github.com/opencontainers/runc@v1.3.6

go get github.com/opencontainers/runc@v1.4.3

go get github.com/opencontainers/runc@v1.5.0-rc.3

1.3.6

1.4.3

1.5.0-rc.3

CVE-2026-41579 · published 2026-07-07T16:52:19Z · modified 2026-07-08T15:29:23.485432274Z · JSON