CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments
2026-05-02T20:52:16Z•86770d8a3407baad625e681e95f1af6cc63d359db195f4661260559faa66894e
CVE-2026-31431Copy Failcloudcontainersdetectionexploit-in-the-wildkernelkuberneteslinuxmitigationpatchingprivilege escalationroot escalation
What happened
Microsoft Security Blog warns of CVE-2026-31431 (“Copy Fail”), a high-severity Linux vulnerability that enables local root privilege escalation across cloud environments and Kubernetes workloads. A working exploit is already observed in the wild, so organizations should urgently prioritize detection, patching, and mitigations to reduce exposure in hosts, containerized workloads, and multi-tenant cloud deployments.
Why it matters
A reviewed impact interpretation has not been published for this record.
Evidence and limitations
- Source ID
- microsoft_security_blog
- Record identifier
- 86770d8a3407baad625e681e95f1af6cc63d359db195f4661260559faa66894e
- Enrichment time
- 2026-05-02T20:52:16Z
- AI-assisted enrichment
- Yes
This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.