7.8

CVE-2026-30892: containers crun Improper Privilege Management

CVSS: 7.8v3.1HighAnalyzed
AliasesRHSA-2026:19020RHSA-2026:19178RHSA-2026:28036
Published 25-03-2026Last modified 26-03-2026
Open JSON

Vulnerability summary

CVE-2026-30892 is a high (CVSS 7.8) Improper Privilege Management vulnerability in containers crun. EPSS estimates a 0.17% chance of exploitation in the next 30 days, higher than 5.9% of scored vulnerabilities. 1 public exploit is recorded.

Overall risk
41/100
0100
Medium · default modelHow is this calculated?
CVSS score
7.8/10
010
High · v3.1 (NVD)
EPSS score
0.17%
0%100%
Low · +0.01 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits1github

Timeline

  1. 25-03-2026
    PublishedVulnerability first disclosed.
  2. 26-03-2026
    Last modifiedVulnerability information updated.

Description

crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.

CVSS metrics

5 scores · 5 sources · 1 version

EPSS trend

Probability

0.17%

Chance of exploitation in the next 30 days

Percentile

6%

Versus all other CVEs

30-day change

+0.01 pp

From 0.16% on 20-09-2026

20-09-202620-10-2026
EPSS score
0.17%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

1 found
  • githubUnverified

    Crun

    Maturity: poc

Weaknesses

CWE · root cause

Affected systems

Redhat5 products
  • container-selinux< 4:2.246.0-1.el10_0
  • crun< 0:1.27-2.el10_2 | < 0:1.27-1.el9_8 | < 0:1.27.1-1.el10_0 | < 0:1.27-1.el9_6 | < 0:1.27-1.el9_7 | < 0:1.27-1.el10_1
  • crun-debuginfo< 0:1.27-2.el10_2 | < 0:1.27-1.el9_8 | < 0:1.27.1-1.el10_0 | < 0:1.27-1.el9_6 | < 0:1.27-1.el9_7 | < 0:1.27-1.el10_1
  • crun-debugsource< 0:1.27-2.el10_2 | < 0:1.27-1.el9_8 | < 0:1.27.1-1.el10_0 | < 0:1.27-1.el9_6 | < 0:1.27-1.el9_7 | < 0:1.27-1.el10_1
  • crun-krun< 0:1.27-2.el10_2
Containers1 product
  • crun≥ 1.19, < 1.27
Crun_project1 product
  • crun≥ 1.19, < 1.27
Debian1 product
  • crunAll versions (No fix recorded) | < 1.27-1
Opensuse1 product
  • crun&distro=openSUSE Tumbleweed< 1.27-1.1
Ubuntu1 product
  • crunAll versions (No fix recorded)

6 vendors · 10 products

References

25 links
Show all 25 references