A flaw was found in crun. After pivot_root or chroot, crun reopens /dev/null for stdio without preventing symlink follows. If /dev is not mounted and a malicious image replaces /dev/null with a symlink, crun can open a host bind-mounted file and a non-root container process can write to it and chown it. Affected versions are crun 1.29.1 and earlier. This is a separate issue from CVE-2026-47766 and from the /dev/console symlink flaw. No fixed release is published yet.