Cri-o: arbitrary command injection via pod annotation

published 2024-04-26 2 y ago modified 2026-09-10 1 mo ago also EUVD-2024-1060 , GHSA-2cgq-h8xw-2v5j , GO-2024-2791

cvss: 7.2; version 3.1, CNA
cisa kev: Not listed; not in CISA's catalog
epss: 1.4%; EPSS 1.4% chance of exploitation in 30 days, percentile 72%
public exploits: 0; none known

A flaw was found in cri-o, where an arbitrary systemd property can be injected via a Pod annotation. Any user who can create a pod with an arbitrary annotation may perform an arbitrary action on the host system.

Patch / fix

fixed in 5 distros 3 links 1

go github.com/cri-o/cri-o 1.27.6, 1.28.6, 1.29.4
Red Hat Red Hat OpenShift Container Platform 4.12 0:1.25.5-16.2.rhaos4.12.gitcb09013.el8
Red Hat Red Hat OpenShift Container Platform 4.13 0:1.26.5-16.2.rhaos4.13.git67e2a9d.el9
Red Hat Red Hat OpenShift Container Platform 4.14 0:1.27.6-2.rhaos4.14.gitb3bd0bf.el9
Red Hat Red Hat OpenShift Container Platform 4.15 0:1.28.6-2.rhaos4.15.git77bbb1c.el8

red hat opensuse azure linux

cri-o openshift 4.12 1.25.5-16.2.rhaos4.12.gitcb09013.el8
podman openshift 4.12 3:4.4.1-3.2.rhaos4.12.el8
skopeo openshift 4.12 2:1.9.4-4.3.rhaos4.12.el8
skopeo openshift 4.12 2:1.9.4-4.3.rhaos4.12.el9
podman-tests openshift 4.12 3:4.4.1-3.2.rhaos4.12.el8
skopeo-tests openshift 4.12 2:1.9.4-4.3.rhaos4.12.el8
skopeo-tests openshift 4.12 2:1.9.4-4.3.rhaos4.12.el9
podman-docker openshift 4.12 3:4.4.1-3.2.rhaos4.12.el8

red hat advisories RHSA-2024:2784 RHSA-2024:2672 RHSA-2024:2669 RHSA-2024:3496

grype openSUSE Tumbleweed 0.80.1-1.1

opensuse advisories openSUSE-SU-2024:14334-1

cri-o CBL-Mariner 2.0 1.22.3-2

azure linux advisories AZL-42307

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

github.com/opencontainers/runc#4217 pull request

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2024-3154 updated 2026-08-06 cvss 7.2

cri-o: Arbitrary command injection via pod annotation

Red Hat OpenShift Container Platform 4.12 cri-o 1.25.5-16.2.rhaos4.12.gitcb09013.el8
fixed: vendor fix RHSA-2024:2784
Red Hat OpenShift Container Platform 4.13 cri-o 1.26.5-16.2.rhaos4.13.git67e2a9d.el8, cri-o 1.26.5-16.2.rhaos4.13.git67e2a9d.el9
fixed: vendor fix RHSA-2024:3496
Red Hat OpenShift Container Platform 4.14 cri-o 1.27.6-2.rhaos4.14.gitb3bd0bf.el8, cri-o 1.27.6-2.rhaos4.14.gitb3bd0bf.el9
fixed: vendor fix RHSA-2024:2672
Red Hat OpenShift Container Platform 4.15 cri-o 1.28.6-2.rhaos4.15.git77bbb1c.el8, cri-o 1.28.6-2.rhaos4.15.git77bbb1c.el9
fixed: vendor fix RHSA-2024:2669
Red Hat OpenShift Container Platform 3.11 cri-o Red Hat OpenShift Container Platform 4.12 perf 4.18.0-372.103.1.el8_6, kernel 4.18.0-372.103.1.el8_6, bpftool 4.18.0-372.103.1.el8_6, podman 4.4.1-3.2.rhaos4.12.el8, skopeo 1.9.4-4.3.rhaos4.12.el8, skopeo 1.9.4-4.3.rhaos4.12.el9, +43 more Red Hat OpenShift Container Platform 4.14 podman 4.4.1-13.4.rhaos4.14.el8, podman 4.4.1-13.4.rhaos4.14.el9, podman-tests 4.4.1-13.4.rhaos4.14.el8, podman-tests 4.4.1-13.4.rhaos4.14.el9, podman-docker 4.4.1-13.4.rhaos4.14.el8, podman-docker 4.4.1-13.4.rhaos4.14.el9, +11 more Red Hat OpenShift Container Platform 4.15 podman 4.4.1-23.2.rhaos4.15.el8, podman 4.4.1-23.2.rhaos4.15.el9, podman-tests 4.4.1-23.2.rhaos4.15.el8, podman-tests 4.4.1-23.2.rhaos4.15.el9, podman-docker 4.4.1-23.2.rhaos4.15.el8, podman-docker 4.4.1-23.2.rhaos4.15.el9, +15 more
not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation: none
Automatable: no
Technical impact: total
Assessed: 2 mo ago (2026-08-24)

Exploit prediction

1.42% chance of exploitation in the next 30 days, higher than 72% of all scored CVEs (FIRST EPSS, 2026-11-08).

CVSS scores

assigned by	version	score	vector
CNA	3.1	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H
GitHub	3.1	7.2	CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:U/C:H/I:H/A:H

Affected packages

ecosystem	package	affected	fixed in
go	github.com/cri-o/cri-o	>=1.29.0, <1.29.4 >=1.28.0, <1.28.6 <1.27.6	1.29.4 1.28.6 1.27.6

Affected products

Red Hat Red Hat OpenShift Container Platform 4.12
Red Hat Red Hat OpenShift Container Platform 4.13
Red Hat Red Hat OpenShift Container Platform 4.14
Red Hat Red Hat OpenShift Container Platform 4.15
Red Hat Red Hat OpenShift Container Platform 3.11

Classification

Weakness

CWE-77 Improper Neutralization of Special Elements used in a Command

References

github.com /opencontainers/runc/pull/4217
web
access.redhat.com /errata/RHSA-2024:2669
vendor-advisory
access.redhat.com /errata/RHSA-2024:2672
vendor-advisory
access.redhat.com /errata/RHSA-2024:2784
vendor-advisory
access.redhat.com /errata/RHSA-2024:3496
vendor-advisory
access.redhat.com /security/cve/CVE-2024-3154
vdb-entry, web
bugzilla.redhat.com /show_bug.cgi?id=2272532
issue-tracking, web
github.com /cri-o/cri-o/security/advisories/GHSA-2cgq-h8xw-2v5j
web, advisory
github.com /opencontainers/runtime-spec/blob/main/features.md#unsafe-annotations-in-configjson
web
nvd.nist.gov /vuln/detail/CVE-2024-3154
advisory
github.com /cri-o/cri-o
package

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.

CPEs and fixed versions use Anchore's correction of NVD's data: Added CPE configurations because not yet analyzed by NVD.

Summary