Investigate in your agent.

Turn this advisory into a focused investigation. Ask your agent to check your project’s versions, explain the evidence, and suggest a compatible fix.

Your agent needs remote MCP support and access to https://cve.new/mcp.

Read the setup guide

Skip to content
cve.newCreate a CVE report
Check your stack
CVE-2026-104795

Insights-runtime-extractor: insights-runtime-extractor: container escape via privileged binary execution

Products / packages Red Hat OpenShift Container Platform 4.19 · Red Hat OpenShift Container Platform 4.20 · Red Hat OpenShift Container Platform 4.21 · 2 more

Published

Share

Severity and exploitation

Not in CISA KEV

KEV coverage does not rule out exploitation.

KEV checked 14/11/2026, 23:00:32 UTC
redhat · CVSS:3.1 · 8.8
Assessment vectorCVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Severity

high8.8

CVSS measures technical severity, not the likelihood of an attack.

Known exploitation

Not listed in the checked CISA KEV catalog

Absence from CISA KEV does not rule out attacks.

Public exploit

Not established by this record

Missing evidence does not mean no public exploit exists.

Remediation

Source guidance available

Review the recorded instructions. Guidance may be a workaround rather than a fixed version.

What this means

The insights-runtime-extractor runs as a privileged DaemonSet (hostPID: true) that scans container processes for runtime fingerprinting. When scanning a container, the coordinator:

Source excerpt · redhat

Attack conditions

No attack-condition excerpt has been identified here. Review the full source description and references for authentication, network access, and configuration requirements.

Review supporting sources →

Affected versions

Check the exact model, release, and any platform requirements against your installation.

Red Hat · redhat

Red Hat OpenShift Container Platform 4.19

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1792771524 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.19::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.20

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1792849665 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.20::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.21

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1792008935 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.21::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 4.22

1 range
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

1792844435 → before *

rpm versions

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:4.22::el9

Red Hat · redhat

Red Hat OpenShift Container Platform 5

0 ranges
redhat version evidence

Compare with this publisher’s ranges. This does not inspect your installation.

affected

unaffected

unknown

Other versions: affected

Product identifiers (CPE)cpe:/a:redhat:openshift:5
Automatic dependency matching is unavailable for this record. Use the product evidence and publisher’s instructions to check your installation.

What to do

Compare your installed product and version with the affected versions above. A matching product name alone does not confirm exposure.

The vulnerability requires a code fix to implement a complete privilege drop (setting all three UID/GID fields, clearing all Linux capability sets, and setting PR_SET_NO_NEW_PRIVS) before executing any fingerprint binary.

redhat guidance ↗

cve.new guidance unless attributed to a publisher. This page does not inspect your installation.

Public exploit evidence

No public exploit reference is identified in the imported evidence. This is not a claim that no exploit exists.

Original source description

Read the full publisher description

The insights-runtime-extractor runs as a privileged DaemonSet (hostPID: true) that scans container processes for runtime fingerprinting. When scanning a container, the coordinator:

  1. fork()s a child process
  2. setns() into the target container's PID and mount namespaces
  3. fchdir() back to an orphaned FD pointing at the extractor's own root filesystem (where /crio.sock is hostPath-mounted)
  4. Calls only seteuid(target_uid) — changing the effective UID but leaving the real UID and saved-set-UID at 0 and retaining the permitted capability set
  5. The check_no_privileged_perms() guard inspects only the Effective capability set (so it passes), and is skipped entirely when the target runs as uid 0
  6. The VersionExecutable fingerprint invokes fpr_kind_executable with process.command_line[0] — the target's argv[0], read from /proc/<pid>/cmdline and fully controlled by the workload
  7. fpr_kind_executable calls exec.Command(executable, "--version").Output() — executing the workload's own binary inside the workload's mount namespace while ruid=0 in the host user namespace

The executed process can call setuid(0) to restore full root with CAP_SYS_ADMIN, and inherits the orphaned cwd which resolves into the extractor container's filesystem containing the host CRI-O socket.

Affected Code

1. Insufficient privilege drop (Rust — extractor coordinator)

File: extractor/src/insights_runtime_extractor.rs

// Lines 139-146 — seteuid-only drop, guard skipped for root containers
join_process_namespaces(process.pid)?;
change_dir(current_dir);
switch_user(*process.uid)?;
if *process.uid != 0 {
    perms::check_no_privileged_perms()
        .expect("Must not have privileged permissions to run fingerprints");
}
fingerprint::run_fingerprints(&config, out_dir, &process);

// Lines 182-185 — only effective UID changed; ruid/suid stay 0
fn switch_user(uid: u32) -> Result<(), ScannerError> {
    debug!("... Becoming user: {uid}");
    seteuid(uid.into()).map_err(|e| ScannerError::Errno(e))
}

2. Execution of untrusted binary (Go — fingerprint)

File: fingerprints/pkg/utils/file.go

// Lines 75-80 — executes a path taken verbatim from workload's argv[0]
func GetExecutableVersionOutput(executable string) (string, error) {
    out, err := exec.Command(executable, "--version").Output()
    if err != nil {
        return "", err
    }
    return string(out), nil
}

3. Workload-controlled path forwarded (Rust — version_executable)

File: version_executable.rs

// Lines 29-34 — workload-controlled command_line[0] forwarded to fingerprint
return Some(vec![
    fpr_kind_executable,
    out_dir.to_string(),
    String::from(&process.command_line[0]),
    String::from(&version_executable.runtime_kind_name),
]);

Attack Pattern

Attacker: Any tenant able to schedule a pod (unprivileged, any namespace) Victim: The node running the insights-runtime-extractor DaemonSet Trigger: Automatic — the DaemonSet scans all container processes on the node

Attack sequence:

  1. Attacker creates a pod whose process name matches a configured versioned-executable pattern (node, python, python3, MainThread, or contains java)
  2. The pod's main binary (at the path matching argv[0]) is a malicious executable that calls setuid(0) to restore root
  3. When the insights operator triggers a scan, the DaemonSet forks, enters the attacker's mount namespace, and executes the attacker's binary with ruid=0
  4. The attacker's code regains full root with CAP_SYS_ADMIN in the host user namespace
  5. The inherited cwd contains the host CRI-O socket → full node compromise

References

6 sources
access.redhat.com/errata/RHSA-2026:83702
Vendor advisoryredhat
access.redhat.com/errata/RHSA-2026:89198
Vendor advisoryredhat
access.redhat.com/errata/RHSA-2026:89341
Vendor advisoryredhat
access.redhat.com/errata/RHSA-2026:89655
Vendor advisoryredhat
access.redhat.com/security/cve/CVE-2026-104795
Security advisoryredhat
bugzilla.redhat.com/show_bug.cgi
Source referenceredhat

Inside the record

Evidence available

Package identity · not supplied
Version evidence
Remediation guidance
Weakness classification
Additional publishers

Describes the evidence in this view, not whether the product is safe.

Original records

CVE-2026-104795

View the latest unmodified CVE JSON from the official source. It may be newer than this imported page.

cve.new JSON →

Underlying weaknesses

The source’s classification of what caused the vulnerability.

CWE-250 ↗

Execution with Unnecessary Privileges

redhat

Related →
Contributing organizations · 2
redhat

Assigning organization

2026-10-30
CISA-ADP

Additional data publisher

2026-10-14

Timeline

All times UTC

  1. Advisory published

    Publication date supplied by the source.

  2. Source updated

    Latest modification date supplied by the source.

  3. Last imported by cve.new

    Latest catalog import, not the date we first saw this advisory.

What changed

Follow changes
  1. CVE · CVE-2026-104795

    Observed 2026-10-30T04:31:33.886Z · upstream updated 2026-10-30T04:26:30.832Z

    Product or version evidence changed

    before

    [
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.19",
    "platforms": [],
    "versions": [
      {
        "version": "1792771524",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.20",
    "platforms": [],
    "versions": [
      {
        "version": "1792849665",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.20::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.21",
    "platforms": [],
    "versions": [
      {
        "version": "1792008935",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.21::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.22",
    "platforms": [],
    "versions": [
      {
        "version": "1792844435",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.22::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795"
  }
]

    after

    [
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.19",
    "platforms": [],
    "versions": [
      {
        "version": "1792771524",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.19::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.20",
    "platforms": [],
    "versions": [
      {
        "version": "1792849665",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.20::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.21",
    "platforms": [],
    "versions": [
      {
        "version": "1792008935",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.21::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 4.22",
    "platforms": [],
    "versions": [
      {
        "version": "1792844435",
        "status": "unaffected",
        "lessThan": "*",
        "versionType": "rpm"
      }
    ],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:4.22::el9"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795"
  },
  {
    "vendor": "Red Hat",
    "name": "Red Hat OpenShift Container Platform 5",
    "platforms": [],
    "versions": [],
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift:5"
    ],
    "source": "redhat",
    "url": "https://www.cve.org/CVERecord?id=CVE-2026-104795"
  }
]

Large field values are marked as truncated previews. Original source snapshots remain retained.

Showing up to 50 most recent observed changes.