CVE-2026-40226CWE-348

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file

Medium · published April 10, 2026

CVSS v3.1
6.4
EPSS
0%
Percentile
0.6
In the wild
Unconfirmed
What it is

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

The record
Technical detail
CVSS v3.1
6.4 · MEDIUM
Vector
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00094 · 0.6th percentile
Weakness
CWE-348 · Use of Less Trusted Source
Published
2026-04-10T15:18Z
EPSS history
Timeline
  • 10 APR 15:18Z
    In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file
    cvelistv5