CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments
2026-05-03T08:52:22Z•134bde5a1456ce69fed8ff52c6bc712552cce94afb906888f40d5d5871413dd8
CVE-2026-31431cloudcopy-failexploit-in-the-wildincident-responsekernelkuberneteslinuxprivilege-escalationvulnerability
What happened
CVE-2026-31431 (“Copy Fail”) is a high‑severity Linux vulnerability that enables local root privilege escalation across cloud environments and Kubernetes workloads. A working exploit is already observed in the wild, so organizations should urgently prioritize detection, patching/updating affected Linux kernels/hosts, harden container runtimes and Kubernetes nodes, and apply mitigations and monitoring to reduce risk.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 134bde5a1456ce69fed8ff52c6bc712552cce94afb906888f40d5d5871413dd8
- Enrichment time
- 2026-05-03T08:52:22Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.