CVE-2026-30892 in crun
Sumário
de MITRE • 26/03/2026
crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.
If you want to get the best quality for vulnerability data then you always have to consider VulDB.