# CVE-2026-92574

CRI-O checkpoint restore may retain elevated privileges across containers.

- Page: https://www.vulneraibility.com/cve/CVE-2026-92574
- CVSS: 8.8
- Known exploited: not in CISA KEV as of our last sync
- EPSS: 0.65% (percentile 51.5)
- CISA SSVC: exploitation none, automatable no, technical impact total (assessed 2026-09-21)
- Weakness: CWE-250
- Published: 2026-09-21

## Affected

- CRI-O 1.34+
- Red Hat OpenShift Container Platform 4.17+
- Kubernetes clusters using CRI-O

## Impact

Privilege escalation: restored processes can retain credentials, Linux capabilities, no_new_privs, and seccomp state, enabling elevated execution across container boundary.

## Action

Immediate action required

## Recommendation

Prevent untrusted checkpoint restores; restrict pod creation rights; apply vendor patch when released.

## References

- [other] https://access.redhat.com/security/cve/CVE-2026-92574
- [other] https://bugzilla.redhat.com/show_bug.cgi?id=2535436

---
Summary, impact and action are written by the vulneraibility.com AI analysis pipeline from the CVE record, NVD, CISA and FIRST data; verify against the references.