CVE-2026-47215
Singularity: Incorrect path matching for 'limit container paths' directive
CVSS Score
4.8
EPSS Score
0.0%
EPSS Percentile
0th
SingularityCE and SingularityPRO are open source container platforms. Prior to SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14, incorrect path-string matching in the singularity.conf limit container paths directive allows a container in a sibling directory such as /data/safe-but-unsafe to be run when /data/safe is allowed under setuid mode. This permits a user to run a container from outside the administrator's configured path allowlist. Installations that do not use limit container paths are not affected. This issue is fixed in SingularityCE 4.4.2 and SingularityPRO 4.3.9 and 4.1.14.
| CWE | CWE-22 |
| Vendor | sylabs |
| Product | singularity |
| Published | Sep 15, 2026 |
| Last Updated | Sep 15, 2026 |
Stay Ahead of the Next One
Get instant alerts for sylabs singularity
Be the first to know when new medium vulnerabilities affecting sylabs singularity are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:U/C:L/I:L/A:L Attack Vector
Local
Attack Complexity
Low
Privileges Required
Low
User Interaction
Required
Scope
Unchanged
Confidentiality
Low
Integrity
Low
Availability
Low
Affected Versions
sylabs / singularity
< 4.4.2
sylabs / SingularityPRO
< 4.1.14 >= 4.2.0, < 4.3.9
References
github.com: https://github.com/sylabs/singularity/security/advisories/GHSA-wqcr-7rf3-f64m github.com: https://github.com/sylabs/singularity/pull/4152 github.com: https://github.com/sylabs/singularity/commit/c08791793e843d4c9c1f2fc1d9d12abef747378f github.com: https://github.com/sylabs/singularity/commit/c1dc9470a769e6e534b588a4ed521768ca4fc0d1 github.com: https://github.com/sylabs/singularity/releases/tag/v4.4.2