CVE-2026-41326: Arbitrary File Overwrite in Kata Containers via CopyFile API Symlink Subversion

Vulnerability ID: CVE-2026-41326

CVSS Score: 8.2

Published: 2026-05-04

Kata Containers versions 3.4.0 through 3.28.0 contain a vulnerability in the CopyFile API policy enforcement mechanism. The Kata Agent's policy engine failed to validate the target path of symbolic links, allowing an attacker on the host to overwrite arbitrary files inside the guest VM. This flaw enables privilege escalation and data exfiltration, compromising the isolation boundary of Confidential Virtual Machines.

TL;DR

An authorization bypass in Kata Containers allows host-level attackers to overwrite sensitive guest files via symlink subversion in the CopyFile API.

Technical Details

CWE ID : CWE-61

Attack Vector : Local

CVSS v4.0 Score : 8.2

EPSS Score : 0.00019

Exploit Status : None

KEV Status : Not Listed

Affected Systems

Kata Containers kata-agent

Kata Containers genpolicy

kata-containers : >= 3.4.0, < 3.29.0 (Fixed in:…