CVE-2026-111435 PUBLISHED

Assigner: openEuler
Reserved: 16.10.2026 Published: 12.11.2026 Updated: 12.11.2026

Relative path traversal vulnerability in openEuler iSulad on Linux.

This vulnerability is associated with program file src/daemon/modules/image/oci/oci_load.c.

This issue affects iSulad: through 2.1.6.

In oci_load.c, oci_load_process_manifest() does not sanitize the Config path of manifest.json. A malicious tar package can enable the isulad with the root permission to read any file on the host.

Metrics

CVSS 3.1

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:N/UI:R/S:C/C:H/I:N/A:N
CVSS Score: 7.4

Attack Vector	Network	Scope	Changed
Attack Complexity	Low	Confidentiality Impact	High
Privileges Required	None	Integrity Impact	None
User Interaction	Required	Availability Impact	None

CVSS 3.1

Product Status

Vendor	openEuler
Product	iSulad
Versions	Default: affected affected from 0 to 2.1.6 (incl.)

Credits

Yixuan Cao finder

References

https://atomgit.com/openeuler/iSulad/commit/370889a81f1e7381de68ad7ded88b3439e266af5?ref=master&prId=2646
https://atomgit.com/src-openeuler/iSulad/pull/812
https://www.openeuler.org/zh/security/security-bulletins/detail/?id=openEuler-SA-2026-4865

Problem Types

CWE-23 Relative path traversal CWE