CVE-2026-92574

Summary

This vulnerability allows a user to bypass Kubernetes security context by creating a pod from a malicious checkpointed container, potentially leading to elevated privileges.

Exploitability

Exploitation requires permission to create a pod from a malicious checkpoint image and checkpoint restore functionality to be available. This makes it moderately exploitable.

Blast radius

If exploited, this can result in execution with elevated privileges across the container security boundary, impacting the entire Kubernetes cluster.

Detection

No reliable host or network indicator is derivable from the published description.

Prioritized remediation

Upgrade to CRI-O 1.34 or later, or disable checkpoint restore functionality.

Analysis generated locally by qwen2.5:7b-instruct (no data left the box). AI-assisted — verify against primary sources before acting.