CVE-2026-105768 | Chainguard apko up to 1.4.4 Passwd Parsing pkg/passwd UserEntry.Parse/GroupEntry.Parse UID/GID integer overflow

October 5, 2026 Yanac

A vulnerability identified as problematic has been detected in Chainguard apko up to 1.4.4. Affected by this issue is the function UserEntry.Parse/GroupEntry.Parse of the file pkg/passwd of the component Passwd Parsing. This manipulation of the argument UID/GID causes integer overflow.

This vulnerability is handled as CVE-2026-105768. The attack can be initiated remotely. There is not any exploit available.

You should upgrade the affected component.VulDB Recent EntriesRead More