01 Record

CVE-2026-63343

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

CriticalPUBLISHEDCNA: GitHub_M

Base score9.9 CVSS v3.xCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

02 Description

Arbitrary File Read/Write: metadata.yaml symlink in image allows host filesystem access as root

Published

2026-08-21 14:53Z10 HR AGO

Last updated

2026-08-21 21:44Z3 HR AGO

Reserved

2026-07-16

Assigning CNA

GitHub_M

Record state

PUBLISHED

Severity

Critical (CVSS 9.9)

CVSS vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Weaknesses

SSVC decision

ExploitationnoneAutomatablenoTechnical Impacttotal

Data version

5.2

Document digest

61cdb8dbec405cda22310c8ac692f144b0eddb1a2d8f70dea7ff9f0fecd9a04c

VendorProductVersionsPlatforms

lxcincus< 7.3.0—