Unverified50% confidenceFactExact time
After enabling --private-users=pick, systemd-nspawn allocates an unused UID/GID range on the host (usually 65,536 IDs) for the container and maps container root (UID 0) to a high-numbered ordinary user on the host, thereby reducing the attack surface.
1
Sources
50%
Confidence
Long-term
Relevance
10/23/2026
First Seen
Sources
Related Entities
Related Claims
UnverifiedBy bypassing authentication and triggering an unhandled termination of NSPPE, attackers established initial root-level access on the underlying FreeBSD platform.71% similarUnverified在 Linux 系统中 root（UID 0）能绕过几乎所有访问控制，包括读写任意文件、加载内核模块70% similarUnverifiedIn the Langflow vulnerability, attackers log in as an ordinary non-admin user, add an MCP server whose command field contains a malicious payload, the server accepts and stores the command without validation, and code execution is then triggered by fetching the MCP server list; captured payloads include extracting environment variables, reading /etc/passwd and probing with commands such as id and whoami.64% similarUnverifiedAgentOS 中每个智能体的文件系统访问权限可精确到文件夹级别和操作类型级别（如只能写、不能删），由MCP服务端校验拦截违规操作61% similarUnverifiediOS kernel vulnerabilities and privilege escalation refer to attackers exploiting memory corruption, logic flaws, and other issues in the iOS kernel (XNU) to escalate from ordinary app privileges to the highest system privileges (root).61% similar
Cite This Claim
Stable URI
https://kongchang.com/claim/1091890API
curl https://kongchang.com/api/v1/knowledge/claims/1091890MCP
get_claim(id=1091890)