CVE-2026-30892

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2026-30892
Import Source
https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-30892.json
JSON Data
https://api.test.osv.dev/v1/vulns/CVE-2026-30892
Aliases
  • GHSA-4vg2-xjqj-7chj
Downstream
AZL (1)
BELL (1)
CLSA (1)
DEBIAN (1)
openSUSE (1)
RHSA (6)
RLSA (4)
UBUNTU (1)
Related
ALSA (4)
openSUSE (1)
Published
2026-03-25T23:57:01Z
Modified
2026-10-06T02:37:37Z
Severity
  • 0.0 (None) CVSS_V3 - CVSS:3.1/AV:L/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:N CVSS Calculator
Summary
Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation
Details

crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the crun exec option -u (--user) is incorrectly parsed. The value 1 is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.

Database specific 
{
    "cna_assigner":  "GitHub_M",
    "cwe_ids":  [
        "CWE-269"
    ],
    "osv_generated_from":  "https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/30xxx/CVE-2026-30892.json"
}
References

Affected packages

Git / github.com/containers/crun

Affected ranges

Type
GIT
Repo
https://github.com/containers/crun
Events
Introduced
db31c42ac46e20b5527f5339dcbf6f023fcd539c
Fixed
a718a92cc9a94955a5a550b6fdec1378c247ec50
Fixed
1bd7f42446999b0e76bc3d575392e05c943b0b01
Database specific
Show details 
{
    "cpe":  "cpe:2.3:a:crun_project:crun:*:*:*:*:*:*:*:*",
    "extracted_events":  [
        {
            "introduced":  "1.19"
        },
        {
            "fixed":  "1.27"
        }
    ],
    "source":  [
        "CPE_RANGE",
        "REFERENCES"
    ]
}

Database specific

source 
"https://storage.googleapis.com/osv-test-cve-osv-conversion/osv-output/CVE-2026-30892.json"