CVE-2026-109358
Description
A flaw was found in Edgeless Systems Contrast. The node installer creates the containerd configuration file with insecure, world-writable permissions, allowing any local user on the host to modify its contents. A local unprivileged attacker can exploit this flaw by modifying configuration parameters, such as the container runtime executable path, to achieve privilege escalation.
Statement
This vulnerability is rated as having an Important impact because an authenticated local attacker with minimal privileges can manipulate container orchestration configurations to achieve full administrative access over the host. Red Hat Enterprise Linux and OpenShift Container Platform do not distribute or support Edgeless Systems Contrast, nor do default Red Hat container stacks employ world-writable permissions for runtime service configurations. Consequently, standard Red Hat deployments are not affected by this flaw unless third-party Contrast tooling has been manually introduced.
Understanding the Weakness (CWE)
Confidentiality,Integrity
Technical Impact: Read Application Data; Modify Application Data
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
