Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host code execution via an unvalidated configuration path annotation. The runtime accepts an arbitrary io.katacontainers.config_path pod annotation and loads the referenced host TOML file without restriction. As a result, a pod user who can place a file at a host-visible path can supply a configuration that selects an attacker-controlled hypervisor or virtio-fs daemon binary, executing code as root on the host. This issue is fixed in version 4.0.0.

According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual     Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host     code execution via an unvalidated configuration path annotation. The runtime accepts an arbitrary     io.katacontainers.config_path pod annotation and loads the referenced host TOML file without restriction.
    As a result, a pod user who can place a file at a host-visible path can supply a configuration that     selects an attacker-controlled hypervisor or virtio-fs daemon binary, executing code as root on the host.
    This issue is fixed in version 4.0.0.(CVE-2026-50540)

Tenable has extracted the preceding description block directly from the EulerOS kata-containers security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	Name	Product	Family	Type	Severity
364927	EulerOS 2.0 SP11 : kata-containers (EulerOS-SA-2026-4330)	Nessus	Huawei Local Security Checks	Local	critical
364906	EulerOS 2.0 SP13 : kata-containers (EulerOS-SA-2026-4055)	Nessus	Huawei Local Security Checks	Local	critical
364902	EulerOS 2.0 SP11 : kata-containers (EulerOS-SA-2026-4239)	Nessus	Huawei Local Security Checks	Local	critical
364853	EulerOS 2.0 SP13 : kata-containers (EulerOS-SA-2026-4146)	Nessus	Huawei Local Security Checks	Local	critical

Detections

Analytics

CVE-2026-50540

critical

Tenable Plugins

critical

critical

critical

critical