GO-2026-4863

vendorUSosv

Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast

view advisory published 2026-04-02Licence: per source

Contrast BadAML injection allows arbitrary code execution in github.com/edgelesssys/contrast

01

describes (1)

Related CVEs.

IDseverity exploitable
CVE-2026-100839UShigh8.4—
Contrast is a confidential-computing runtime for Kubernetes. In versions before 1.18.0, the guest kernel's ACPI/AML handling is vulnerable to an AML injection attack ("BadAML"). AC…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan