high · CVSS v3 8.1 · EPSS 0.00173

CVE-2026-16487

Bootc's default signature policy can allow unsigned content to be applied during image upgrades, enabling an attacker who can modify a mutab

Overview

Bootc's default signature policy can allow unsigned content to be applied during image upgrades, enabling an attacker who can modify a mutable tag to execute arbitrary OS code as root on reboot. This flaw affects systems using bootc with the insecureAcceptAnything policy. It poses a serious risk to the integrity and availability of the host filesystem.

Description

A flaw was found in bootc when operating with the default containers signature policy. Automatic or manual upgrades of a mutable image tag may apply unsigned content for registries that fall through to insecureAcceptAnything, allowing an attacker who can update that tag to execute arbitrary OS content as the host root filesystem on reboot.

Impact

The vulnerability compromises confidentiality, integrity, and availability of the host OS, allowing attackers to gain root privileges. Defenders using bootc with default policies are at risk. The flaw can be exploited during normal upgrade operations, potentially affecting all containers relying on mutable tags.

Remediation

Apply the latest bootc update that enforces strict signature verification or disable insecureAcceptAnything. Configure bootc to use immutable image tags or enforce signed images. Verify container registries are trusted and restrict write access to mutable tags. Monitor for unauthorized tag updates.

Risk context

Severity is high with a CVSS v3 score of 8.1, but the EPSS score of 0.00173 indicates a low probability of exploitation in the wild. Defenders should treat this as a moderate urgency issue, prioritizing patching in environments that use bootc with default policies.

Affected products

  • bootc
  • Fedora
  • Red Hat Enterprise Linux
  • CentOS
  • Rocky Linux
  • AlmaLinux
  • Oracle Linux
  • Ubuntu

Scores

Severity
high
CVSS v2
7.6
CVSS v3
8.1
CVSS v4
—
EPSS
0.00173

bootc container unsigned root policy upgrade high-severity

← All CVEs

Related CVEs

high

CVE-2026-112107

A flaw has been found in ztxz16 fastllm up to 1.8.2. Affected by this issue is the function SafeTensorItem::CreateBuffer of the file src/model.cpp of the component Safetensors Weight Loading. This manipulation of the argument data_offsets causes buffer overflow. The attack can be initiated remotely. The exploit has been published and may be used. The project was informed of the problem early through an issue report but has not responded yet.

View analysis

high

CVE-2026-108121

CVE-2026-108121 is a high‑severity flaw in SME Server 11.0rc1‑215 that lets a privileged user inject Apache directives during domain creation. The injected directives corrupt httpd.conf, causing Apache to fail to start after reboot and leading to a denial‑of‑service of the web server and its virtual hosts. The issue is exploitable only by users with high privileges on the host.

View analysis

high

CVE-2026-112081

A deserialization flaw in HanLP’s load function allows remote attackers to supply a crafted classpath argument, potentially leading to arbitrary code execution. The issue affects all versions up to 2.1.0-beta.64 and can be triggered via network interfaces. It has been publicly disclosed and remains unpatched.

View analysis

high

CVE-2026-112082

The CVE-2026-112082 vulnerability affects the SGLang library (up to version 0.5.19) in the Expert‑Distribution Recording Endpoint. It allows remote attackers to trigger a denial‑of‑service by manipulating the Scheduler.expert_distribution_handle function. The flaw is publicly documented and the fix is pending merge.

View analysis