Skip to main content

Containerd CVE-2026-53492

| EUVDEUVD-2026-41109 HIGH
Improper Input Validation (CWE-20)
2026-06-19 GHSA-33vj-92qq-66hc
Information Disclosure Kubernetes Red Hat Containerd Checkpoint Linuxfoundation
8.4
CVSS 4.0 · Vendor
View

Vulnerability Assessment

Weakness
CWE
CWE-20
OWASP Top 10:2025
A05:2025 - Injection
ASVS 5.0
V2 - Validation and Business Logic Input validation, allowlisting
This Week Schedule remediation this week. Why: HIGH severity (CVSS 7.0-8.9).
Patch available 0.5% exploitation probability (EPSS)

Get an e-mail when this CVE is exploited, patched or re-scored. Free account.

Alert me

AnalysisAIv3 – Jul 01, 2026

Kubernetes device-plugin and resource-allocation enforcement can be bypassed in containerd by a namespace user holding pod-creation rights, who restores a container from a maliciously crafted checkpoint image. The CRI restore path trusts Container Device Interface (CDI) annotations embedded in untrusted checkpoint metadata instead of the pod's create-time spec, letting the attacker smuggle arbitrary CDI edits (host device nodes and mounts) into the restored container. It affects containerd v2.1.0-2.1.8, v2.2.0-2.2.4 and v2.3.0-2.3.1; there is no public exploit identified at time of analysis and it is not listed in CISA KEV.

Earlier versions of this analysis (2)
v2 Jul 01, 2026 - 19:29 cvss changed CVSS 8.4

Kubernetes device-plugin and resource-allocation bypass in containerd (versions before 2.3.2, 2.2.5, and 2.1.9) lets a user with pod-creation rights smuggle attacker-controlled Container Device Interface (CDI) edits into a restored container. Because the CRI checkpoint-restore path trusts CDI annotations embedded in an untrusted checkpoint archive rather than the pod's create-time spec, an attacker can attach host device nodes and mounts that scheduling and admission controls never authorized. No public exploit identified at time of analysis; there is a vendor-released patch, and exploitation is gated on the node having CDI enabled with a matching sensitive host CDI specification.

v1 Jun 19, 2026 - 02:18

CDI annotation smuggling in containerd's CRI checkpoint restoration allows a Kubernetes user with pod creation permissions to inject arbitrary host device nodes and filesystem mounts into a restored container, bypassing standard device plugin enforcement. When restoring a container from a checkpoint, containerd trusts CDI annotations embedded in the untrusted checkpoint archive rather than enforcing the pod's validated create-time specification, enabling a container escape to host-level resources. No public exploit has been identified at time of analysis, but the Critical vendor rating and scope to host resources make this a high-priority patch for CDI-enabled clusters, particularly GPU and AI/ML workloads.

Affected VersionsENISA

containerd 2.3.0, < 2.3.2
containerd 2.1.0, < 2.1.9
containerd 2.2.0, < 2.2.5

Affected Packages

go github.com/containerd/containerd no fix
go github.com/containerd/containerd/v2 fix: 2.1.9, 2.2.5, 2.3.2
euvd containerd_2_1_0 fix: 2.1.9
euvd containerd_2_2_0 fix: 2.2.5
euvd containerd_2_3_0 fix: 2.3.2

Source: OSV (Open Source Vulnerabilities)

Affects your stack

Affects 5 packages in go, euvd

Checking this CVE against your own stacks and servers is part of the Basic plan and up.

Sign in to check

Know when Containerd gets its next vulnerability

  • Watch products and get an email when something new is published
  • Check this CVE against your own stack and servers
  • Exploit and PoC references, threat intelligence from 22 sources
Continue with Google Continue with GitHub

No credit card · 7-day full trial

Severity by source

Vendor (CNA) PRIMARY 8.4 HIGH
CVSS:4.0/AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N
vuln.today AI 7.7 HIGH

Pod-creation rights give PR:L over a low-complexity network-reachable CRI action; trusted CDI injection breaks container-to-host isolation (S:C) with high integrity impact and no direct confidentiality/availability loss.

3.1 AV:N/AC:L/PR:L/UI:N/S:C/C:N/I:H/A:N
4.0 AV:N/AC:L/AT:N/PR:L/UI:N/VC:N/VI:H/VA:N/SC:H/SI:H/SA:N
SUSE 8.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Red Hat 8.2 HIGH

Primary rating from Vendor (CNA).

CVSS VectorVendor

Attack Vector
Network
Attack Complexity
Low
Attack Requirements
None
Privileges Required
Low
User Interaction
None
Vulnerable system: Confidentiality
None
Vulnerable system: Integrity
High
Vulnerable system: Availability
None
Subsequent system: Confidentiality
High
Subsequent system: Integrity
High
Subsequent system: Availability
None

Lifecycle Timeline

1
CVSS changed
Jul 01, 2026 - 19:22 NVD
8.4 (HIGH)

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

Articles & Coverage 4

News 4 New Kubernetes Vulnerabilities - 3 Critical, 1 High Severity Jun 20, 2026 News 6 New Docker Vulnerabilities - 3 Critical, 3 High Severity Jun 20, 2026 News 6 New Docker Vulnerabilities - 3 Critical, 3 High Severity Jun 19, 2026 News Critical CDI Annotation Smuggling in Kubernetes containerd CRI - CVE-2026-53492 Jun 19, 2026

Executive ViewAI

Why It Matters

Containerd deployments running versions 2.1.0-2.1.8, 2.2.0-2.2.4, or 2.3.0-2.3.1 are vulnerable to a privilege-escalation attack (CVE-2026-53492) where authenticated users with pod-creation rights can circumvent device and resource controls, potentially accessing host devices and violating workload isolation. No public exploit code exists at this time. The vulnerability carries an 8.4 CVSS score and requires immediate patching to maintain containerization security boundaries.

Recommended Action

Within 24 hours: Identify all containerd deployments using affected versions (2.1.0-2.1.8, 2.2.0-2.2.4, 2.3.0-2.3.1) and assess pod-creation RBAC assignments. Within 7 days: Apply the vendor-released patch per containerd security advisory to all affected instances. Within 30 days: Validate patch deployment across all environments and review pod-creation privileges to restrict access to necessary service accounts only.

Business Impact: High
Compensating Controls

Apply vendor patch.

Threat Intelligence Overview

EPSS Score
0.5%
Top 62% exploitable
Threat Intel
1
1 sources
Social Media
1
Sightings
Data Quality
7 sources
Confidence: High
EUVD NVD CVE.org EPSS GHSA Vendor CIRCL GitHub VulDB

How this decision was reached

The engine reads each signal below and applies a fixed list of rules from top to bottom. The first rule that matches sets the recommended action – like a statement, every line is shown.

SignalValue
Severity HIGH
CISA KEV No
Public POC No
EPSS 0.5%
Patch available Yes
Active threat No
Deciding rule
HIGH severity (CVSS 7.0-8.9)
What every action level means
Emergency Immediate action required. Criteria: CRITICAL + in CISA KEV (actively exploited) without patch, OR CRITICAL + EPSS > 30% without patch, OR CRITICAL + active threat signals without patch.
Act Now Prioritize within 24-48h. Criteria: in KEV with patch available, OR CRITICAL + public POC, OR HIGH + EPSS > 10%, OR CRITICAL + active threat, OR any CRITICAL severity.
This Week Schedule remediation this week. Criteria: HIGH severity (CVSS 7.0-8.9). Patch within normal change window.
This Month Plan within 30 days. Criteria: MEDIUM severity (CVSS 4.0-6.9), lower exploitation probability. Include in regular patch cycle.
Monitor Track and reassess. Criteria: LOW severity (CVSS 0.1-3.9), minimal exploitation risk. No immediate action needed.

SSVC AssessmentENISA

SSVC Decision· derived
Scheduled
Exploitation· derived
None
System Exposure· derived
Open
Automatable· derived
No
Human Impact
High

Priority Score

42
Low Medium High Critical
KEV: 0
EPSS: 0
CVSS: +42
PoC: 0
Weaponized: 0
Threat intel: 0
Gov advisory: 0

Attack Technique

Information Disclosure MEDIUM

Information disclosure occurs when an application unintentionally exposes sensitive data that aids attackers in reconnaissance or directly compromises security.

Related Vulnerabilities in containerd Multiple Security Flaws

View all 5
CVE-2026-47262 MEDIUM
5.3
CVE-2026-53488 CRITICAL
9.4
CVE-2026-53489 HIGH
8.2
CVE-2026-50195 MEDIUM
5.6

More in Containerd

View all
CVE-2023-25173 HIGH POC
7.8 Feb 16

containerd is an open source container runtime. Rated high severity (CVSS 7.8), this vulnerability is low attack complex
CVE-2022-23648 HIGH POC
7.5 Mar 03

containerd is a container runtime available as a daemon for Linux and Windows. Rated high severity (CVSS 7.5), this vuln
CVE-2026-53493 MEDIUM POC
6.9 Sep 25

Denial of service in containerd versions prior to 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 allows an unauthenticated atta
CVE-2026-47218 CRITICAL
9.3 Oct 15

Native code execution inside the shim zygote process is possible in runwasi's containerd-shim-wasmtime-v1 prior to 0.6.1
CVE-2026-95837 HIGH
7.8 Oct 12

Privilege escalation in containerd's CRI checkpoint-restore path allows an authenticated local attacker who can submit a
CVE-2021-41103 HIGH
7.8 Oct 04

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. Rated high se
CVE-2026-107446 MEDIUM
6.8 Oct 08

Integer overflow in containerd overlaybd's LSMT index loader (do_load_index) lets a crafted, untrusted overlaybd blob pu
CVE-2022-23471 MEDIUM
6.5 Dec 07

containerd is an open source container runtime. Rated medium severity (CVSS 6.5), this vulnerability is remotely exploit
CVE-2021-32760 MEDIUM
6.3 Jul 19

containerd is a container runtime. Rated medium severity (CVSS 6.3), this vulnerability is remotely exploitable, no auth
CVE-2021-21334 MEDIUM
6.3 Mar 10

In containerd (an industry-standard container runtime) before versions 1.3.10 and 1.4.4, containers launched through con

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2023-22515 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2017-9791 CRITICAL POC
9.8
CVE-2017-15944 CRITICAL POC
9.8
CVE-2019-0604 CRITICAL POC
9.8

Same technique Information Disclosure

View all
CVE-2019-2725 CRITICAL POC
9.8
CVE-2021-34523 CRITICAL POC
9.0
CVE-2013-2251 CRITICAL POC
9.8
CVE-2017-5638 CRITICAL POC
9.8
CVE-2025-24813 CRITICAL POC
9.8
CVE-2025-68613 HIGH POC
8.8
CVE-2015-1701 HIGH POC
7.8
CVE-2017-0147 HIGH POC
7.5

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Package Hub 15 SP7 Fixed
openSUSE Tumbleweed Fixed
SLES15-SP5-CHOST-BYOS-SAP-CCloud Affected
SLES15-SP6-CHOST-BYOS Affected
SLES15-SP6-CHOST-BYOS-Aliyun Affected

References

Advisories & patches
ADVISORY https://access.redhat.com/errata/RHSA-2026:15862 ADVISORY https://access.redhat.com/errata/RHSA-2026:32963 ADVISORY https://access.redhat.com/errata/RHSA-2026:32974 ADVISORY https://access.redhat.com/errata/RHSA-2026:36873 ADVISORY https://access.redhat.com/errata/RHSA-2026:41030 ADVISORY https://access.redhat.com/errata/RHSA-2026:42852 ADVISORY https://access.redhat.com/errata/RHSA-2026:44622 ADVISORY https://seclists.org/oss-sec/2026/q2/970 ADVISORY https://ubuntu.com/security/notices/USN-8472-1 ADVISORY https://ubuntu.com/security/notices/USN-8473-1 ADVISORY https://vuldb.com/vuln/372573 REF https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc

Search Externally

GitHub PoC Exploit-DB PacketStorm Snyk Rapid7 Nuclei Templates Trickest PoC
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy