CVE-2026-17113Medium· 6.0▾ SunlitA flaw was found in CRI-O's container-creation environment-variable handling (`mergeEnvs` in `server/utils.go`, consumed by `setupContainerEnvironmentAndWorkdir` in `server/container_create.go`). When a `CreateContainer` request supplies…
▾ Sunlit zone — Low / medium · no exploitation signal
impact 33 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
Last analysed / modified upstream
0.1%
A flaw was found in CRI-O's container-creation environment-variable handling
(mergeEnvs in server/utils.go, consumed by setupContainerEnvironmentAndWorkdir in
server/container_create.go). When a CreateContainer request supplies a nil CRI
Envs field, CRI-O falls back to using the target OCI image's config.Env entries
unfiltered, in contrast to the normal merge path, which validates each entry for a
key=value form before use. An OCI image whose config.Env contains an entry with no
= character (e.g. a bare NOEQUALS string) causes CRI-O to split that entry into a
single-element slice and then index its second element, which is out of range. This
triggers an unrecovered Go runtime panic in the crio daemon process, crashing it and
terminating the container-runtime service for all workloads on the node until it is
restarted.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-2004High· 8.8Missing validation of type of input in PostgreSQL intarray extension selectivity estimator function allows an object creator to execute arbitrary code as the operating system user running the database
CVE-2026-18830High· 8.1Insufficient input validation in Amazon Bedrock AgentCore harness might allow an authenticated remote user to execute configured tools bypassing model invocation and security controls via crafted content blocks in conversation messages
CVE-2026-78016Low· 3.1Dell Secure Connect Gateway (SCG) Policy Manager, versions prior to 5.34.00.16, contains an Improper Validation of Specified Type of Input vulnerability
CVE-2026-107723High· 8.1fast-jwt provides fast JSON Web Token (JWT) implementation
CVE-2026-98336Medium· 5.5In the Linux kernel, the following vulnerability has been resolved: wifi: mac80211: don't offload TC setup on AP_VLAN interfaces AP_VLAN interfaces are purely virtual, so don't try to offload TC setup to drivers
GHSA-wmxr-6j5f-838pHigh· 7.7Duplicate Advisory: Keycloak: Unauthorized access via improper validation of encrypted SAML assertions