CVE-2026-64777

A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.

CVSS v3 4.3 MEDIUM

4.3^/10

CVSS v3 : MEDIUM

Vector :

Exploitability : 2.8 / Impact : 1.4

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact LOW

Integrity Impact NONE

Availability Impact NONE

Scope UNCHANGED

References

Link	Resource
https://github.com/apple/container/security/advisories/GHSA-2v2q-4q35-h585	Vendor Advisory Mitigation

Configurations

Configuration 1 (hide)

cpe:2.3:a:apple:container:*:*:*:*:*:swift:*:*

History

18 Oct 2026, 20:10

Type	Values Removed	Values Added
Summary		(es) Un par constructor malicioso podría solicitar un archivo en contexto por nombre del host y recibir el contenido de lo que sea que el nombre resuelva, incluso cuando se resuelva fuera del contexto de construcción. Esta vulnerabilidad se aborda en la versión 1.2.0 del contenedor.

Information

Published : 2026-08-20 19:16

Updated : 2026-10-18 20:10

NVD link : CVE-2026-64777

Mitre link : CVE-2026-64777

CVE.ORG link : CVE-2026-64777

JSON object : View

Products Affected

apple

container

CWE

CWE-22

Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')

{"id": "CVE-2026-64777", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2026-64777", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "partial"}], "version": "2.0.3", "timestamp": "2026-08-20T19:47:07.034534Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "cvssData": {"scope": "UNCHANGED", "version": "3.1", "baseScore": 4.3, "attackVector": "NETWORK", "baseSeverity": "MEDIUM", "vectorString": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:L/I:N/A:N", "integrityImpact": "NONE", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "NONE", "privilegesRequired": "LOW", "confidentialityImpact": "LOW"}, "impactScore": 1.4, "exploitabilityScore": 2.8}]}, "affected": [{"source": "product-security@apple.com", "affectedData": [{"vendor": "Apple", "product": "container", "versions": [{"status": "affected", "version": "0", "lessThan": "1.2.0", "versionType": "custom"}]}]}], "published": "2026-08-20T19:16:57.733", "references": [{"url": "https://github.com/apple/container/security/advisories/GHSA-2v2q-4q35-h585", "tags": ["Vendor Advisory", "Mitigation"], "source": "product-security@apple.com"}], "vulnStatus": "Analyzed", "weaknesses": [{"type": "Secondary", "source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "description": [{"lang": "en", "value": "CWE-22"}]}], "descriptions": [{"lang": "en", "value": "A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0."}, {"lang": "es", "value": "Un par constructor malicioso podr\u00eda solicitar un archivo en contexto por nombre del host y recibir el contenido de lo que sea que el nombre resuelva, incluso cuando se resuelva fuera del contexto de construcci\u00f3n. Esta vulnerabilidad se aborda en la versi\u00f3n 1.2.0 del contenedor."}], "lastModified": "2026-10-18T20:10:00.110", "configurations": [{"nodes": [{"negate": false, "cpeMatch": [{"criteria": "cpe:2.3:a:apple:container:*:*:*:*:*:swift:*:*", "vulnerable": true, "matchCriteriaId": "1847596D-D84A-4BCE-B99F-FBA392209FE2", "versionEndExcluding": "1.2.0"}], "operator": "OR"}]}], "sourceIdentifier": "product-security@apple.com"}