CVE-2024-9675

CVE-2024-9675 is a medium-severity vulnerability affecting Buildah, where improper validation of cache mount paths allows a malicious Containerfile to mount arbitrary host directories into a container with read/write access. This local vulnerability (CVSS 4.4) requires low privileges and local access, potentially leading to information disclosure and modification of host files. There is currently no evidence of active exploitation, publicly available exploit code, or significant community discussion surrounding this CVE.