high7.8
CVE-2026-109358
Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writa…
Impact
Edgeless Systems Contrast 1.8.0 before 1.24.1 contains an incorrect permissions vulnerability where the node installer writes the containerd config world-writable (0666). Local unprivileged users on the node can modify the containerd config, for example overwriting the runc location, to escalate privileges.
Affected products
| Product | Affected versions |
|---|---|
| Edgeless Systems Contrast 1.8.0 | before 1.24.1 |
Versions were read from the advisory text. No structured product data has been published for this record yet.