https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-06T02:37:45.488247+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2026-52791 CVE-2026-52791 — fuse-overlayfs release-1.x preserves SUID/SGID bits after truncate/open(O_TRUNC) 2026-10-06T02:37:45.504229+00:00

Affected: containers fuse-overlayfs

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with mode 4777. This issue is fixed in version 1.17.