---
id: CVE-2026-62146
title: >-
  A trust-boundary flaw in CRI-O's sandbox state persistence allows
  attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox
  bookkeeping; once reloaded as trusted after a restart, a later container
  recreate in that sandbo…
summary: >-
  A trust-boundary flaw in CRI-O's sandbox state persistence allows
  attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox
  bookkeeping; once reloaded as trusted after a restart, a later container
  recreate in that sandbo…
severity: high
cvss: 7.8
cvssVector: 'CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H'
cwe:
  - CWE-501
vendor: Red Hat
product: cri-o
affected:
  - cri-o (all versions)
published: '2026-09-30'
updated: '2026-09-30'
sourceUpdated: '2026-09-30T20:17:34.013'
source: NVD
sourceUrl: 'https://nvd.nist.gov/vuln/detail/CVE-2026-62146'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2026-62146'
    label: secalert@redhat.com
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2499618'
    label: secalert@redhat.com
  - url: 'https://github.com/cri-o/cri-o/security/advisories/GHSA-6wmc-5877-hgc9'
    label: secalert@redhat.com
  - url: 'https://access.redhat.com/errata/RHSA-2026:89713'
    label: 'RHSA-2026:89713'
tags:
  - nvd
  - cve.org
  - exploit-available
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-09-30T18:57:40.257250Z'
ingestedAt: '2026-09-30T12:02:58.586Z'
epss: 0.00168
epssPercentile: 0.06096
exploits:
  github: 1
  githubRepos:
    - 'https://github.com/TeamN4C/SG-2026-0026'
  checkedAt: '2026-10-27T19:06:17.047Z'
exploitAvailable: true
---

## Overview

A trust-boundary flaw in CRI-O's sandbox state persistence allows attacker-influenced pod metadata to overwrite CRI-O's own reserved sandbox bookkeeping; once reloaded as trusted after a restart, a later container recreate in that sandbox can expose a host-side runtime-management resource inside the container, enabling container escape.

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.