CVE-2026-40226

Medium

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

mitre·CWE-348·Published 2026-04-10

CVSS

6.4

EPSS

0.00

KEV

Exploits

cve.orgen

119 chars

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

NVDen

119 chars

In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.

Version	Type	Source	Base	Exp	Impact	Vector
3.1	Primary	cve.org	6.4	—	—	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
3.1	Secondary	NVD	6.4	0.5	5.9	CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H