CVE Catalog
CVE-2026-40226
MediumSummary
In systemd versions 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file in nspawn.
Risk Assessment
The organization may be exposed to unauthorized access to the host system, potentially leading to serious security breaches.
Recommendation
It is recommended to update systemd to version 260 or later and to review and verify the configuration files in use.
Original NVD description (English source)
In nspawn in systemd 233 through 259 before 260, an escape-to-host action can occur via a crafted optional config file.