CVE-2026-22907CWE-266

An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data

Critical · published January 15, 2026

CVSS v3.1
9.9
EPSS
0%
Percentile
37.3
In the wild
Unconfirmed
What it is

🔥 A single vulnerability could let an attacker sneak into your host filesystem like an unwelcome guest crashing a party! Imagine a restaurant where the chef leaves the kitchen door wide open, allowing anyone to walk in and swap the ingredients or steal the recipes. That’s exactly what’s happening here – an attacker can access sensitive system data without breaking a sweat! If exploited, this vulnerability could lead to unauthorized modification or disclosure of critical system data, putting your entire system at risk. An attacker could alter configurations, tamper with files, or even steal sensitive information – absolutely devastating!

Put simply

Imagine a restaurant where the chef leaves the kitchen door wide open, allowing anyone to walk in and swap the ingredients or steal the recipes. That’s exactly what’s happening here – an attacker can access sensitive system data without breaking a sweat! CVE-2026-22907 allows unauthorized access to the host filesystem, enabling an attacker to read and modify system files without proper permissions. It's a severe flaw that circumvents security controls.

What to do

If exploited, this vulnerability could lead to unauthorized modification or disclosure of critical system data, putting your entire system at risk. An attacker could alter configurations, tamper with files, or even steal sensitive information – absolutely devastating! Immediately patch your systems to the latest version that addresses this vulnerability. Perform a thorough audit of your filesystem permissions to ensure no unauthorized access is possible. Stay vigilant and monitor for any unusual activity! You've got this! Taking action now will help secure your systems and keep those unwelcome guests out! 🛡️

The record
Technical detail
CVSS v3.1
9.9 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00441 · 37.3th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-01-15T12:59Z
EPSS history
Timeline
  • 15 JAN 12:59Z
    An attacker may gain unauthorized access to the host filesystem, potentially allowing them to read and modify system data
    cvelistv5