low2.0
CVE-2026-52791
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers.
Impact
fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with mode 4777. This issue is fixed in version 1.17.
Affected products
| Product | Affected versions |
|---|---|
| FUSE For Rootless Containers. | before 1.17 |
Versions were read from the advisory text. No structured product data has been published for this record yet.