{"schema":"threatline.record/2","record":{"id":"CVE-2026-113951","aliases":["GHSA-44v5-vx46-ghv6"],"summary":"If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host ","details":"If an attacker can write to the filesystem of a container k8s cluster container, they can plant an exec credential plugin in /etc/kubernetes/admin.conf. kubectl will run that plugin as the macOS host user the next time someone pulls the cluster's kubeconfig onto the host with container k8s write-config or create and then runs kubectl against it — turning filesystem access inside an untrusted Linux container into arbitrary command execution on the host. This vulnerability is addressed in Container version 1.5.0.","categories":["Unclassified"],"product":"Container","vendor":"Apple","ecosystem":null,"affected_ranges":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113951","source_modified_at":"2026-10-23T20:57:20.150Z","fetched_at":"2026-10-23T21:10:45.942435Z","product":"Container","vendor":"Apple","versions":[{"version":"0","status":"affected","lessThan":"1.5.0","versionType":"custom"}],"defaultStatus":null}],"fixed_versions":[{"source":"CVE List","source_url":"https://www.cve.org/CVERecord?id=CVE-2026-113951","source_modified_at":"2026-10-23T20:57:20.150Z","fetched_at":"2026-10-23T21:10:45.942435Z","package":{"name":"Container","ecosystem":null},"version":"1.5.0","basis":"first unaffected version stated in the CVE record"}],"cvss":null,"severity":null,"kev":{"listed":false},"epss":{"probability":null,"percentile":null,"score_date":null},"published_at":"2026-10-23T20:57:20.150Z","modified_at":"2026-10-23T20:57:20.150Z","provenance":[{"source":"CVE List","url":"https://www.cve.org/CVERecord?id=CVE-2026-113951","fetched_at":"2026-10-23T21:10:45.942435Z","source_modified_at":"2026-10-23T20:57:20.150Z"}],"sources":["CVE List"],"references":[{"source":"CVE List","url":"https://github.com/apple/container/security/advisories/GHSA-44v5-vx46-ghv6"}],"locations":[],"motoko_assessment":{"status":"requires_architecture_review","automatic_remediation":false},"cve_state":"PUBLISHED","classification":{"method":"product-first software-layer rules","rules_version":"2.1","matched_on":null,"confidence":"unknown","reviewed":false},"change_timestamp":"2026-10-23T20:57:20.150Z","content_hash":"406c99ba869fcd8f2884c20128e67bd15bca7f65e279899eaac8d8cc04377f80"}}