CVE & CISA-KEV Catalog
CVE-2026-30892
UNSCOREDDescription
crun is an open source OCI Container Runtime fully written in C. In versions 1.19 through 1.26, the `crun exec` option `-u` (`--user`) is incorrectly parsed. The value `1` is interpreted as UID 0 and GID 0 when it should have been UID 1 and GID 0. The process thus runs with higher privileges than expected. Version 1.27 patches the issue.
How to fix
Remediation Available
crunDebian
Fixed in:1.27-1CVE-2026-30892
crunRocky
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
crunRed Hat / RHEL
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
crun-debuginfoRocky
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
crun-debuginfoRed Hat / RHEL
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
crun-debugsourceRed Hat / RHEL
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
crun-debugsourceRocky
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-1.el10_1RHSA-2026:6622
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_8RHSA-2026:19178
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_7RHSA-2026:6621
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
Fixed in:0:1.27-1.el9_6RHSA-2026:28036
crun-krunRed Hat / RHEL
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
crun-krunRocky
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Fixed in:0:1.27-2.el10_2RHSA-2026:19020
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3.1 Vector
No CVSS vector data available.
Exploit Intelligence
0.16%probability of exploitation in 30 days
5thpercentile
Low risk: more likely to be exploited than 5% of all known CVEs.
References
Related Vulnerabilities
Other CWE-269 (Improper Privilege Management) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2017-12635 | Critical | 9.8 | 100% | - | Fix |
| CVE-2022-24637 | Critical | 9.8 | 99% | - | Fix |
| CVE-2017-5689 | Critical | 9.8 | 92% | KEV | Fix |
| CVE-2020-3243 | Critical | 9.8 | 88% | - | - |
| CVE-2024-21888 | High | 8.8 | 87% | - | - |
| CVE-2022-0441 | Critical | 9.8 | 85% | - | Fix |
Embed a live status badge for CVE-2026-30892
Markdown
[](https://tridentstack.com/cve/CVE-2026-30892)HTML
<a href="https://tridentstack.com/cve/CVE-2026-30892"><img src="https://tridentstack.com/cve/badge/CVE-2026-30892.svg" alt="CVE-2026-30892"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-03-27.