🔴 Critical | Source: Microsoft Security Response Center
CVE-2026-64676 is a vulnerability in Kata Containers where unauthorised access to mem-agent ttRPC methods allows an untrusted host to tamper with the memory of a confidential guest workload. This undermines the core security guarantee of confidential computing — that a cloud host or hypervisor cannot read or alter a tenant’s protected workload. The impact is particularly severe for organisations using Azure confidential VMs or AKS with confidential node pools that rely on Kata Containers for hardware-enforced isolation.
Security Architect’s Take: Audit any Azure confidential computing deployments using Kata Containers and apply vendor patches immediately; until patched, review whether workloads requiring strong confidentiality guarantees should be temporarily migrated or isolated, and restrict host-level access to ttRPC endpoints as a compensating control.
Original advisory: CVE-2026-64676 Kata Containers: Unauthorized mem-agent ttRPC methods let an untrusted host tamper with confidential-guest memory