Vulnerability details
CVE-2026-15801
Red Hat OpenShift Container Platform 4Red Hat OpenShift Container Platform 5
Cri-o: cri-o: insufficient validation during container checkpoint restore
CVSS 3.1
8.0High
Official description
A vulnerability was found in CRI-O related to the container checkpoint and restore feature. When CRI-O is configured to restore containers from checkpoint archives, insufficient validation of restore metadata may allow a user with sufficient privileges to perform unintended operations on the host filesystem. Successful exploitation requires that container checkpoint and restore functionality is enabled, which is not the default configuration. An attacker must also be able to trigger restoration of a container from untrusted checkpoint content.
CVSS scores
| Score | Version | Source | Vector |
|---|---|---|---|
| 8.0High | 3.1 | CVEProject cvelistV5 (CNA) (redhat) | CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:H |
Affected products
| Vendor | Product | Versions | Source |
|---|---|---|---|
| Red Hat | Red Hat OpenShift Container Platform 4 | All | CVEProject cvelistV5 (CNA) |
| Red Hat | Red Hat OpenShift Container Platform 5 | All | CVEProject cvelistV5 (CNA) |
References and advisories
2- https://access.redhat.com/security/cve/CVE-2026-15801 vdb-entryx_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2500823 issue-trackingx_refsource_REDHAT
Kolun on Telegram @kolunsec
Exploited CVEs, key news and a daily digest
Alerts for this product's next CVEsFollow the product to get new vulnerabilities on Telegram.
Details
- Published
- 2026-09-21
- Last updated
- 2026-11-04
- State
- Published
- Assigner (CNA)
- redhat
Exploit prediction (EPSS)
0.47%
Probability of exploitation in 30 days
41.6%
Percentile (among all CVEs)
SSVC assessment (CISA)
- Automatable
- No
- Exploitation
- None
- Technical impact
- Total
Weaknesses (CWE)
- CWE-22Improper Limitation of a Pathname to a Restricted Directory