The vulnerability arises from insufficient validation of mount and storage rules in Kata Containers when using genpolicy for confidential containers. An attacker who controls a host operator can mount arbitrary container‑rootfs paths over sensitive host locations or inject arbitrary content. This can expose confidential data or allow attacker‑controlled input, potentially leading to information disclosure or privilege escalation.

The flaw affects Red Hat OpenShift Container Platform 4, which includes Kata Containers as part of its confidential container support. Any Red Hat OpenShift 4 installation that uses genpolicy for guest protection is impacted.

The CVSS score is 8.1, reflecting a high severity. EPSS is not available, so exploitation probability is unspecified, but the presence of a known CVE and no KEV listing suggests it is not yet widely exploited. The lack of strict mount validation permits an attacker with host privileges to operate as if they had container‑root capability, which can enable attackers to read or modify host files and ultimately gain unintended access. The attack vector is local to the host operator with administrative privileges; remote exploitation would require compromised host control.