<?xml version="1.0" encoding="UTF-8"?><rss version="2.0"><channel><title>agentprime: containers-crun</title><description>Every new CVE for containers-crun.</description><link>https://agentprime.io/</link><item><title>CVE-2026-88264: Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs</title><link>https://agentprime.io/advisories/CVE-2026-88264/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-88264/</guid><description>CVSS 5.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Thu, 10 Sep 2026 08:40:36 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-47766: crun follows rootfs /dev symlink while creating default devices</title><link>https://agentprime.io/advisories/CVE-2026-47766/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-47766/</guid><description>CVSS 5.1 (Medium). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Fri, 14 Aug 2026 16:16:37 GMT</pubDate><category>CVE</category></item><item><title>CVE-2026-30892: Crun incorrectly parses `crun exec` option `-u`, leading to privilege escalation</title><link>https://agentprime.io/advisories/CVE-2026-30892/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2026-30892/</guid><description>CVSS 0.0 (None). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 25 Mar 2026 23:57:01 GMT</pubDate><category>CVE</category></item><item><title>CVE-2025-24965: .krun_config.json symlink attack creates or overwrites file on the host in crun</title><link>https://agentprime.io/advisories/CVE-2025-24965/</link><guid isPermaLink="true">https://agentprime.io/advisories/CVE-2025-24965/</guid><description>CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.</description><pubDate>Wed, 19 Feb 2025 16:46:31 GMT</pubDate><category>CVE</category></item></channel></rss>