https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 09 Oct 2026 18:28:33 +0000 https://cve.radiocsirt.org/vuln/bdu:2026-08914 bdu:2026-08914 https://cve.radiocsirt.org/vuln/bdu:2026-08914 https://cve.radiocsirt.org/vuln/euvd-2026-331384 EUVD-2026-331384 https://cve.radiocsirt.org/vuln/euvd-2026-331384 https://cve.radiocsirt.org/vuln/fkie_cve-2026-58053 <p>Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow&#39;s container.options string to the Docker job container&#39;s HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-opt unchanged. A user who can run a workflow on a Docker-backed runner can create a job container with host namespaces and broad capabilities and escape to the host as root despite privileged mode being disabled.</p> <p>Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow&#39;s container.options string to the Docker job container&#39;s HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-opt unchanged. A user who can run a workflow on a Docker-backed runner can create a job container with host namespaces and broad capabilities and escape to the host as root despite privileged mode being disabled.</p> https://cve.radiocsirt.org/vuln/fkie_cve-2026-58053 https://cve.radiocsirt.org/vuln/ghsa-8qf9-pc52-j7cm <p>Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow&#39;s container.options string to the Docker job container&#39;s HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-opt unchanged. A user who can run a workflow on a Docker-backed runner can create a job container with host namespaces and broad capabilities and escape to the host as root despite privileged mode being disabled.</p> <p>Gitea act_runner with the Docker backend (through act 0.262.0) passes a workflow&#39;s container.options string to the Docker job container&#39;s HostConfig and, when configured with privileged: false, forces only the Privileged flag off while merging options such as --pid=host, --cap-add, and --security-opt unchanged. A user who can run a workflow on a Docker-backed runner can create a job container with host namespaces and broad capabilities and escape to the host as root despite privileged mode being disabled.</p> https://cve.radiocsirt.org/vuln/ghsa-8qf9-pc52-j7cm https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2116 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Gitea ausnutzen, um seine Privilegien zu erhöhen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Gitea ausnutzen, um seine Privilegien zu erhöhen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2026-2116