CVE-2022-27652

score

<0.1

cvss

5.3

epss

0.2%

published

2022-04-18

kev added

—

first seen

2026-10-21

cri-o contains a flaw where containers are started with non-empty default permissions, and Moby (Docker Engine) allows containers to start with inheritable Linux process capabilities, letting attackers elevate capabilities via execve(2), exploit requires access to programs with inheritable file capabilities.