CVE-2026-52791

ADVISORY - debian

Summary

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with mode 4777. This issue is fixed in version 1.17.

fuse-overlayfs (bug https://bugs.debian.org/cgi-bin/bugreport.cgi?bug=1143058) https://github.com/containers/fuse-overlayfs/security/advisories/GHSA-2cc4-p72c-v85h Fixed by: https://github.com/containers/fuse-overlayfs/commit/97e0d968a782fc259ebde112db1e9b9ff1ad724f (v1.17)

EPSS Score⁠: 0.00102 (0.011)

Common Weakness Enumeration (CWE)

ADVISORY - redhat

CWE-281⁠

Improper Preservation of Permissions

Impacted images

Advisories

Sign in to Docker Scout

See which of your images are affected by this CVE and how to fix them by signing into Docker Scout.