CVE-2018-12021: Sylabs Singularity

Medium severity, CVSS 6.5. EPSS: 1.6% chance of exploitation in the next 30 days.

Singularity 2.3.0 through 2.5.1 is affected by an incorrect access control on systems supporting overlay file system. When using the overlay option, a malicious user may access sensitive information by exploiting a few specific Singularity features.

Affected products

• Sylabs Singularity: from 2.3.0, up to and including 2.5.1

Published 2018-07-05. Last modified 2026-06-17.