2

CVE-2026-52791: containers fuse-overlayfs Incorrect Privilege Assignment

CVSS: 2.0v4.0LowAwaiting analysis
AliasesSUSE-SU-2026:23252-1SUSE-SU-2026:23469-1SUSE-SU-2026:23618-1
Published 29-07-2026Last modified 29-07-2026
Open JSON

Vulnerability summary

CVE-2026-52791 is a low (CVSS 2.0) Incorrect Privilege Assignment vulnerability in containers fuse-overlayfs. EPSS estimates a 0.14% chance of exploitation in the next 30 days, higher than 3.4% of scored vulnerabilities.

Overall risk
8/100
0100
Minimal · default modelHow is this calculated?
CVSS score
2.0/10
010
Low · v4.0 (CVE.org)
EPSS score
0.14%
0%100%
Low · +0.04 pp in 30 days
KEVNot listedIn no KEV catalog
RansomwareNone recordedNo known use recorded
Public exploits0No public exploits recorded

Advisory lineage

Upstream 0 · Downstream 1
MGASA-2026-0462

Timeline

  1. 29-07-2026
    PublishedVulnerability first disclosed.
  2. 29-07-2026
    Last modifiedVulnerability information updated.

Description

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with mode 4777. This issue is fixed in version 1.17.

CVSS metrics

5 scores · 5 sources · 2 versions

EPSS trend

Probability

0.14%

Chance of exploitation in the next 30 days

Percentile

3%

Versus all other CVEs

30-day change

+0.04 pp

From 0.10% on 19-09-2026

19-09-202619-10-2026
EPSS score
0.14%

Known exploited

Compare KEV catalogs

Not in any of the 3 tracked catalogs.

Public exploits

0 found

No public exploits indexed.

Weaknesses

CWE · root cause

Affected systems

Suse9 products
  • fuse-overlayfs&distro=SUSE Enterprise Storage 7.1< 1.1.2-150100.3.14.1
  • fuse-overlayfs&distro=SUSE Linux Enterprise Micro 5.3< 1.1.2-150100.3.14.1
  • fuse-overlayfs&distro=SUSE Linux Enterprise Micro 5.4< 1.1.2-150100.3.14.1
  • fuse-overlayfs&distro=SUSE Linux Enterprise Micro 5.5< 1.1.2-150100.3.14.1
  • fuse-overlayfs&distro=SUSE Linux Enterprise Module for Containers 15 SP7< 1.1.2-150100.3.14.1
Opensuse2 products
  • fuse-overlayfs&distro=openSUSE Leap 16.0< 1.15-160000.3.1
  • fuse-overlayfs&distro=openSUSE Tumbleweed< 1.17-1.1
Containers1 product
Debian1 product
  • fuse-overlayfsAll versions (No fix recorded)
Redhat1 product
  • fuse-overlayfs< 0:1.17-1.hum1
Ubuntu1 product
  • fuse-overlayfsAll versions (No fix recorded)

6 vendors · 15 products

References

19 links
Show all 19 references