---
id: 936
title: "[CVE-2020-28914] Big Bugs: Bitbucket Pipelines Kata Containers Build Container Escape"
cve: CVE-2020-28914
source_domain: bugcrowd.com
source_url: "https://www.bugcrowd.com/blog/big-bugs-cve-2020-28914/"
published_at: "2021-03-01T00:00:00Z"
tags: ["container-security", "container-escape", "cve-2020-28914", "kata-containers", "bitbucket-pipelines", "ci-cd-security", "atlassian"]
phying_url: "https://phying.com/item/936"
lang: en
---

# [CVE-2020-28914] Big Bugs: Bitbucket Pipelines Kata Containers Build Container Escape

## Summary

A Kata Containers flaw (CVE-2020-28914) let processes in the Kata VM write to read-only volume mounts, so a malicious build job could overwrite host files as root via Bitbucket Pipelines.

## Intelligence Metadata

- **Sources:** bugcrowd.com
- **CVE:** CVE-2020-28914
- **Published:** 2021-03-01T00:00:00Z
- **Original:** https://www.bugcrowd.com/blog/big-bugs-cve-2020-28914/
- **Phying News:** https://phying.com/item/936