{"id":"CVE-2026-52791","title":"fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers","summary":"fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowin…","severity":"none","cwe":["CWE-266"],"published":"2026-07-29","updated":"2026-09-10","sourceUpdated":"2026-09-10T20:04:54.367","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-52791","references":[{"url":"https://github.com/containers/fuse-overlayfs/commit/97e0d968a782fc259ebde112db1e9b9ff1ad724f","label":"security-advisories@github.com"},{"url":"https://github.com/containers/fuse-overlayfs/releases/tag/v1.17","label":"security-advisories@github.com"},{"url":"https://github.com/containers/fuse-overlayfs/security/advisories/GHSA-2cc4-p72c-v85h","label":"security-advisories@github.com"},{"url":"https://github.com/containers/fuse-overlayfs/security/advisories/GHSA-2cc4-p72c-v85h","label":"134c704f-9b21-4f2e-91b3-4a467353bcc0"}],"tags":["nvd"],"epss":0.00145,"epssPercentile":0.0313,"ingestedAt":"2026-09-10T21:05:53.588Z","slug":"CVE-2026-52791","body":"## Overview\n\nfuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with mode 4777. This issue is fixed in version 1.17.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}