Kubernetes & Container Runtime Volume Mount Host Escape Vulnerability (CVE-2026-18204)

Affected Vendors

kubernetes, linux, containerd

Affected Components

kubelet, runc, docker-engine

Published Date

2026-11-05

Executive & SecOps Summary

SECOPS ASSESSMENT

Affected Scope

Kubernetes clusters (EKS, GKE, AKS, self-managed) and Docker hosts running untrusted workloads or multi-tenant pods

Impact

An attacker inside a compromised pod can exploit a symlink TOCTOU race condition to gain root read/write access on the underlying host node

Mitigation

Roll out patched container runtime node images (runc/containerd) and enforce Kubernetes Pod Security Standards

Affected Products & Version Scope

Kubernetes worker nodes v1.28 through v1.31 and unpatched containerd/runc runtimes

Remediation & Live Workaround Commands

PATCH & WORKAROUND

1. Upgrade Node Pool Images & Container Runtimes Perform a rolling upgrade of your worker nodes to the latest patched containerd and runc packages.

2. Enforce Restricted Pod Security Admission (PSA) Prevent privileged pods and arbitrary host mount capabilities across namespaces:

yaml

apiVersion: v1
kind: Namespace
metadata:
  name: production-workloads
  labels:
    pod-security.kubernetes.io/enforce: restricted
    pod-security.kubernetes.io/audit: restricted

Recommended Security Control & Mitigation Partner

Datadog Cloud & Kubernetes Security

Gain instant visibility into vulnerable container images and block runtime container escape attempts across your Kubernetes clusters.

Detect Container Escape & Privilege Escalation Across Your Kubernetes Fleet

Continuous eBPF-based runtime threat detection and posture management for AWS, GCP, Azure, Docker, and Kubernetes workloads.

Real-Time Production Container CVE Mapping

Start 14-Day Free Cloud Security Trial

Technical Root Cause & Exploitation Mechanics

Root Cause Analysis (TOCTOU Symlink Escape) During container initialization and volume `subPath` mounting, a Time-of-Check to Time-of-Use (TOCTOU) race condition allows a process inside the container namespace to swap a directory with a symlink pointing outside the container rootfs.

Once escaped to the worker node filesystem, attackers can harvest cluster-wide secrets, kubelet certificates, and lateral movement tokens.

Official Vendor Advisories & References

NVD Original English Description

Improper symlink resolution during container volume mount initialization allows a malicious container image or low-privileged pod user to escape to the underlying Linux host filesystem.

https://nvd.nist.gov/vuln/detail/CVE-2026-18204

Source: NVD · Vendor Advisory

SecOps Advisory Dispatch & RSS Feed

Subscribe to Daily Vulnerability Briefings & KEV Alerts

Concise morning briefings for SecOps, DevSecOps, and SRE teams covering newly exploited CVEs and mitigation priorities.

Slack / Teams / RSS Feed: