According to the versions of the kata-containers package installed, the EulerOS installation on the remote host is affected by the following vulnerabilities :

    Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual     Machines (VMs) that perform like containers. Prior to version 4.0.0, kata-runtime is vulnerable to host     code execution via an unvalidated configuration path annotation. The runtime accepts an arbitrary     io.katacontainers.config_path pod annotation and loads the referenced host TOML file without restriction.
    As a result, a pod user who can place a file at a host-visible path can supply a configuration that     selects an attacker-controlled hypervisor or virtio-fs daemon binary, executing code as root on the host.
    This issue is fixed in version 4.0.0.(CVE-2026-50540)

Tenable has extracted the preceding description block directly from the EulerOS kata-containers security advisory.

Note that Nessus has not tested for this issue but has instead relied only on the application's self-reported version number.

ID	名稱	產品	系列	已發布	已更新	嚴重性
364927	EulerOS 2.0 SP11 : kata-containers (EulerOS-SA-2026-4330)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/12	critical
376862	EulerOS 2.0 SP12 : kata-containers (EulerOS-SA-2026-4409)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	critical
364906	EulerOS 2.0 SP13 : kata-containers (EulerOS-SA-2026-4055)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/12	critical
364853	EulerOS 2.0 SP13 : kata-containers (EulerOS-SA-2026-4146)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/12	critical
364902	EulerOS 2.0 SP11 : kata-containers (EulerOS-SA-2026-4239)	Nessus	Huawei Local Security Checks	2026/10/12	2026/10/12	critical
376776	EulerOS 2.0 SP12 : kata-containers (EulerOS-SA-2026-4486)	Nessus	Huawei Local Security Checks	2026/11/6	2026/11/6	critical

偵測

搜尋 Plugin

critical

critical

critical

critical

critical

critical