CVE-2026-62146

The record

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside the container, enabling container escape.

Affected packages

Related vulnerabilities

• CVE-2026-65902 DOMPurify before 3.4.7 passes direct references to the module-level DEFAULT_ALLOWED_TAGS… CWE-501
• CVE-2026-49458 DOMPurify is a DOM-only cross-site scripting sanitizer for HTML, MathML, and SVG. CWE-501
• CVE-2026-48746 vLLM is an inference and serving engine for large language models (LLMs). CWE-501
• GHSA-76mc-f452-cxcm DOMPurify: Hook mutation of `data.allowedTags` / `data.allowedAttributes` permanently… CWE-501
• GHSA-hpcv-96wg-7vj8 DOMPurify: Cross-realm IN_PLACE sanitization leaves executable markup intact via… CWE-501
• CVE-2026-33828 Trust boundary violation in Windows Attestation allows an authorized attacker to elevate… CWE-501
• GHSA-f26g-jm89-4g65 gitoxide: CommandForbiddenInModulesConfiguration Bypass in gix_submodule::File::update()… CWE-501
• GHSA-jf56-mccx-5f3f OpenClaw: Authenticated `/hooks/wake` and mapped `wake` payloads are promoted into the… CWE-501