Threat Intel

v0.1

← CVEs

CVE-2026-30892

N/A
Published
2026-03-26
Last Modified
2026-03-27
Affected Apps
8
Affected Devices
32
CVSS Vector
CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N
crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.
Affected Applications in Environment 8
crun v1.22-1.el9_6
21 devices
crun v1.23.1-2.el9_6
1 device
crun v1.26-1.el9_7
2 devices
crun v1.26-1.el9_7
1 device
crun v1.23.1-2.el9_7
4 devices
crun v1.23.1-2.el9_6
1 device
crun v1.23.1-1.el10_0
1 device
crun v1.14.3-2.module+el8.10.0+90704+e5ea1250
1 device
Affected Devices 32
el103-03.ece.usu.edu Linux el103-04.ece.usu.edu Linux el103-05.ece.usu.edu Linux el103-07.ece.usu.edu Linux el103-08.ece.usu.edu Linux el103-09.ece.usu.edu Linux el103-10.ece.usu.edu Linux el103-14.ece.usu.edu Linux el103-15.ece.usu.edu Linux el103-16.ece.usu.edu Linux el103-17.ece.usu.edu Linux el103-18.ece.usu.edu Linux el103-19.ece.usu.edu Linux el103-20.ece.usu.edu Linux el120-01.ece.usu.edu Linux el120-02.ece.usu.edu Linux el120-03.ece.usu.edu Linux el120-04.ece.usu.edu Linux el120-05.ece.usu.edu Linux el120-06.ece.usu.edu Linux el120-08.ece.usu.edu Linux el120-09.ece.usu.edu Linux el120-10.ece.usu.edu Linux el120-11.ece.usu.edu Linux el120-12.ece.usu.edu Linux el120-14.ece.usu.edu Linux facreadyprod.pplant.usu.edu Linux facreadytestrhel.pplant.usu.edu Linux facshibsp2.pplant.usu.edu Linux oms.db.usu.edu Linux paymentworksdev.banner.usu.edu Linux thinkstation Linux
References 3