TL;DR CVE-2026-77176 is a CVSS 8.1 flaw in Kata Containers genpolicy. A malicious operator can mount arbitrary guest rootfs paths onto sensitive locations. Only Confidential Containers setups are affected. No exploitation in the wild or public proof-of-concept has been confirmed. Why CVE-2026-77176 Matters Kata Containers runs workloads inside lightweight VMs. Confidential Containers builds on that to shield the guest from an untrusted host.