一线运维实战手记 · 云计算 · 数据库 · 故障排查
2026年10月13日

CVE-2026-109358 [HIGH] – Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerabil

未分类
📑 文章目录

Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable (0666). Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate privileges.