Medium 6.0Published Jan 23, 2026

CVE-2026-1386Arbitrary Host File Overwrite via Symlink in Firecracker Jailer

Updated under an hour ago (Oct 26, 2026, 7:50 PM ET)

Does this affect you?

It affects AWS Firecracker and 1 other product. Add what you run to find out whether that includes you.

No exploitation reported and no EPSS estimate yet.

Do this next

Start free and add your stack

Free account, 1 product

Every CVE for AWS Firecracker

Exploited in the last 30 days

A UNIX symbolic link following issue in the jailer component in Firecracker version v1.13.1 and earlier and 1.14.0 on Linux may allow a local host user with write access to the pre-created jailer directories to overwrite arbitrary host files via a symlink attack during the initialization copy at jailer startup, if the jailer is executed with root privileges. To mitigate this issue, users should upgrade to version v1.13.2 or 1.14.1 or above.

CVSS: 6.0 MEDIUM (v3.1, CNA)CVSS:3.1/AV:L/AC:L/PR:H/UI:N/S:U/C:N/I:H/A:H
Weakness (CWE): CWE-61
Known exploited: Not in CISA's KEV catalog
EPSS (exploitation in the next 30 days): Not loaded for this CVE
Assigned by: AMZN
NVD analysis: Analyzed
Record last updated: Jan 23, 2026
First seen by InfoSec Signals: Oct 9, 2026

Affected products

Affected products

AWS Firecracker aws:firecracker (from the name)	1.13.2 not affected; 1.14.1 not affected	CNA record
amazon firecracker amazon:firecracker	before 1.13.2; 1.14.0; 1.14.0	NVD

References

References

https://aws.amazon.com/security/security-bulletins/2026-003-AWS/	vendor-advisory
https://github.com/firecracker-microvm/firecracker/releases/tag/v1.14.1	patch, product, release-notes
https://github.com/firecracker-microvm/firecracker/releases/tag/v1.13.2	patch, product, release-notes
https://github.com/firecracker-microvm/firecracker/security/advisories/GHSA-36j2-f825-qvgc	third-party-advisory, vendor-advisory

The CVE record on cve.org NVD's entry

The CVE record is authoritative. Products marked “from the name” were identified from the CNA's free-text names, not a CPE, and are matched less certainly. This product uses the NVD API but is not endorsed or certified by the NVD.