CVE-2026-52791: Containers Fuse-Overlayfs

Low severity, CVSS 2.0. EPSS: 0.1% chance of exploitation in the next 30 days.

fuse-overlayfs is an implementation of overlayfs in FUSE for rootless containers. Prior to 1.17, the release-1.x C branch preserves SUID and SGID mode bits in main.c during open(O_TRUNC) and truncate handling on a copied-up file, allowing a low-privileged process to leave the upper-layer file with mode 4777. This issue is fixed in version 1.17.

Affected products

• Containers Fuse-Overlayfs: before 1.17 (fixed in 1.17)

Published 2026-07-29. Last modified 2026-09-10.