A vulnerability has been reported in the Kata Containers configuration loading path in both the Rust and Go runtimes. Both runtimes accept the sandbox configuration file path from the pod annotation io.katacontainers.config_path. This path is then passed to the TOML configuration loader without sufficient validation or restriction. An authenticated pod user who is able to set pod annotations may point io.katacontainers.config_path at an arbitrary TOML configuration file available on the host. Since the Kata configuration controls privileged runtime settings, including hypervisor and virtio-fs daemon binary paths, a malicious configuration may cause attacker-controlled binaries to be executed as root on the host when the sandbox starts.