CVE-2026-113951
CVSS Score
0.0
EPSS Score
0.0%
EPSS Percentile
0th
If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s write-config or create and then runs kubectl against it — turning filesystem access inside an untrusted Linux container into arbitrary command execution on the host. This vulnerability is addressed in Container version 1.5.0.
| Vendor | apple |
| Product | container |
| Ecosystems | |
| Industries | Technology |
| Published | Oct 23, 2026 |
Stay Ahead of the Next One
Get instant alerts for apple container
Be the first to know when new unknown vulnerabilities affecting apple container are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apple / Container
0 < 1.5.0