CVE-2026-31431: Copy Fail vulnerability enables Linux root privilege escalation across cloud environments

2026-05-04T08:52:22Z•cf0ad42f66753b1599d603b9dcc4cb9e6c61f99cf657df9d30bdf503e7560af6

CVE-2026-31431Copy FailKubernetesLinuxcloud environmentsdetectionexploit in the wildmitigationpatchingprivilege escalationroot escalation

Open source link →

What happened

CVE-2026-31431 (“Copy Fail”) is a high-severity Linux vulnerability that enables local root privilege escalation across cloud environments and Kubernetes workloads. Microsoft reports a working exploit in the wild—organisations should urgently detect affected systems, apply vendor patches or mitigations, and harden container/Kubernetes configurations to reduce risk.

Why it matters

A reviewed impact interpretation has not been published for this record.

Evidence and limitations

Source ID: microsoft_security_blog
Record identifier: cf0ad42f66753b1599d603b9dcc4cb9e6c61f99cf657df9d30bdf503e7560af6
Enrichment time: 2026-05-04T08:52:22Z
AI-assisted enrichment: Yes

This record may overlap with other records. Its enrichment can be incomplete or wrong, and machine assistance was used. Validate consequential decisions against the linked source and your own environment.

← Back to published records