Privilege Escalation Vulnerability in crun: Security Update Required
Summary
RLSA-2026:19020: Moderate: crun security update. Affects crun versions < 0:1.27-2.el10_2. Fixed in 0:1.27-2.el10_2. How to fix ↓
Check if this vulnerability affects your application
Upload a manifest or SBOM and we'll show whether you're affected, plus every other risky package in the same scan.
No signup required · Results in about 60 seconds
Background
crun is an OCI runtime that provides a lightweight and efficient way to run containers. It is designed to be compliant with the Open Container Initiative (OCI) specifications, making it a popular choice for container management in various environments. The package is known for its performance and low resource consumption, but it has recently been identified with a security vulnerability that could allow unauthorized privilege escalation.
Vulnerability Detail
The vulnerability arises from incorrect parsing of the '--user' option in crun, which can lead to privilege escalation. This means that an attacker could potentially gain elevated permissions within the container environment, compromising the security of the host system and other containers. The issue is classified under CVE-2026-30892, with a CVSS score of 7.8, indicating a moderate to high severity level. If exploited, this vulnerability could allow attackers to execute arbitrary commands with higher privileges than intended.
How To Fix
Minimum fixed version
0:1.27-2.el10_2
This is the first release that contains the fix.
sudo dnf update crunTip — Not sure which version your app runs? Vulert can match this fix to it. Scan free →
Workaround
As a temporary workaround, you can restrict the use of the '--user' option in crun until the package is updated. This can be done by reviewing your container deployment scripts and ensuring that this option is not used.
Conclusion
In summary, the crun package has a significant vulnerability that could allow privilege escalation due to improper parsing of the '--user' option. It is crucial to update to the patched version to mitigate this risk. Users are encouraged to monitor their systems and apply the necessary updates promptly.
See every vulnerability recorded for crun →
FAQ
The crun vulnerability can lead to privilege escalation, allowing attackers to gain unauthorized access to higher privileges within the container environment.
You can use the Vulert playground at Vulert Scanner to check if your application is affected by this vulnerability without requiring any signup.
The CVSS score of this vulnerability is 7.8, indicating a moderate to high severity level.
You can update the crun package by running the command 'sudo yum update crun' in your terminal.
Yes, the permanent fix is to update the crun package to the version 0:1.27-2.el10_2 or later, which addresses the security issue.
Related vulnerabilities
Recent vulnerabilities recorded for crun.
