cve.bz

CVE-2026-52791

2.0 lowEPSS 0.1%

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with mode 4777. This issue is fixed in version 1.17.

CVSS 4.0
2.0CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:N/SI:N/SA:N
EPSS
0.1% chance of exploitation in the next 30 days; higher than 3% of CVEs (scores of 2026-10-25)
CWE
CWE-266
Published
Modified
Record from
the NVD, synced

References

Check your stackJSON