Snyk Research team has found a #container breakout vulnerability (CVE-2024-21626). A “container breakout” vulnerability is one in which an attacker is able to gain unauthorized access to the host operating system from within the container and, in some cases, can allow a user to access sensitive data (credentials, customer info, etc.), modify the system, and launch further attacks, especially when the access gained is with superuser privileges.
You can check all about the vulnerability below:-
Video : - https://youtu.be/eu684ocRmDA
Blog: https://snyk.io/blog/cve-2024-21626-runc-process-cwd-container-breakout/
Snyk learn lesson - https://learn.snyk.io/lesson/cve-2024-21626-runc-process-cwd-container-breakout/
Rory Mcnamara Micah Tancrede Randall Omri Matthew Michael