CVE-2026-40226
Medium · CVSS 6.4 (CVSS 3.1)EPSS n/aPublished Updated Assigner: mitre
Description
In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.
Vector CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H · CWE-348
Status incidents that name it
- · Minor · says not affected (notice says “No action is required”)
“…commitment to protecting customer workloads, we are applying patches for a newly disclosed Systemd vulnerability (CVE-2026-40226) across our platform. This patching will be rolled out automatically over the next several days. During this…”
Affected vendors and products
systemd: systemd
References
- CVE record on cve.org (opens in new tab)
- NVD entry (opens in new tab)
- github.com/systemd/systemd/security/advisories/GHSA-9mj4-rrc3-gjcx (opens in new tab)
- CVE records from the CVE Program (cve.org). CVE® is a registered trademark of The MITRE Corporation. (opens in new tab)
- This product uses data from the NVD API but is not endorsed or certified by the NVD. (opens in new tab)
- Known Exploited Vulnerabilities catalog from CISA. (opens in new tab)
- EPSS scores from FIRST (Exploit Prediction Scoring System). (opens in new tab)