CVE-2026-64777
CVSS Score
4.3
EPSS Score
0.0%
EPSS Percentile
0th
A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.
| Vendor | apple |
| Product | container |
| Ecosystems | |
| Industries | Technology |
| Published | Aug 20, 2026 |
| Last Updated | Aug 20, 2026 |
Stay Ahead of the Next One
Get instant alerts for apple container
Be the first to know when new medium vulnerabilities affecting apple container are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
Affected Versions
Apple / container
0 < 1.2.0