CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments
2026-05-03T14:52:14Z•2abe0ce4de694a557907c865b55e20413db1253cd7bdf265e3cadfaa77b039d4
CVE-2026-31431clouddetectionexploit-in-the-wildkernel-vulnerabilitykuberneteslinuxlocal-rootmitigationprivilege-escalation
What happened
Microsoft warns of a high-severity Linux vulnerability dubbed “Copy Fail” (CVE-2026-31431) that enables root privilege escalation across cloud environments and Kubernetes workloads. A working exploit is already in the wild; organizations are advised to quickly detect, mitigate, and reduce risk for affected systems and workloads.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 2abe0ce4de694a557907c865b55e20413db1253cd7bdf265e3cadfaa77b039d4
- Enrichment time
- 2026-05-03T14:52:14Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.