Skip to main content

containerd EUVDEUVD-2026-40860

| CVE-2026-53488 CRITICAL
Improper Input Validation (CWE-20)
2026-06-19 GHSA-xhf5-7wjv-pqxp
Information Disclosure Containerd
9.4
CVSS 4.0 · Vendor
Share

Severity by source

Vendor (CNA) PRIMARY
9.4 CRITICAL
CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
vuln.today AI
7.8 HIGH

AV:L because a malicious image must run on the host; AC:H and PR:L because a label-consuming plugin must be configured and the attacker needs workload-deployment ability; S:C for container-to-host escape with full impact.

3.1 AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
4.0 AV:L/AC:H/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
SUSE
8.8 HIGH
AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Primary rating from Vendor (CNA).

CVSS VectorVendor

CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
Attack Vector
Local
Attack Complexity
Low
Privileges Required
None
User Interaction
None
Scope
X

Lifecycle Timeline

6
Source Code Evidence Fetched
Jul 01, 2026 - 02:28 vuln.today
Analysis Updated
Jul 01, 2026 - 02:28 vuln.today
v3 (cvss_changed)
Analysis Updated
Jul 01, 2026 - 02:28 vuln.today
v2 (cvss_changed)
Re-analysis Queued
Jul 01, 2026 - 02:22 vuln.today
cvss_changed
CVSS changed
Jul 01, 2026 - 02:22 NVD
9.4 (CRITICAL)
Analysis Generated
Jun 19, 2026 - 02:19 vuln.today

Description PRE-NVD

Disclosed via oss-security. NVD scoring and full description are pending.

Articles & Coverage 4

News 4 New Kubernetes Vulnerabilities - 3 Critical, 1 High Severity Jun 20, 2026 News 6 New Docker Vulnerabilities - 3 Critical, 3 High Severity Jun 20, 2026 News 6 New Docker Vulnerabilities - 3 Critical, 3 High Severity Jun 19, 2026 News Critical Label Injection RCE in Kubernetes containerd CRI Plugin - CVE-2026-53488 Jun 19, 2026

AnalysisAI

Host command execution in containerd's CRI plugin arises because labels from an image config (Dockerfile LABEL instruction) are propagated to the created container without validation; when a downstream plugin consumes those labels for operations (notably the restart-monitor's binary:// logger path), an attacker-controlled label value becomes an arbitrary command executed with host-root privileges. Affected releases are all containerd versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5, and 2.3.2, meaning any environment that pulls and runs an untrusted image on a node using a label-consuming plugin is exposed to full container-to-host escape. …

Unlock full vulnerability intelligence

  • Risk assessment & exploitation conditions
  • Attack chain visualization
  • Remediation with exact patch versions
  • Threat intelligence from 22 sources
  • Personal watchlist & email alerts
Continue with Google Continue with GitHub

Free forever · No credit card required

Attack ChainAIDerived

Hypothetical attack flow derived from CVE metadata

Access
Craft image with malicious LABEL (binary:// payload)
Delivery
Get image pulled/run on target node
Exploit
CRI plugin propagates label unvalidated to container
Execution
restart-monitor consumes label as binary:// logger
Persist
Execute arbitrary command as host root
Impact
Compromise node / escape container
Sign in to reveal

Vulnerability AssessmentAI

Exploitation Exploitation requires two concrete prerequisites: (1) a malicious container image must be pulled and run on the affected node - its OCI image config must carry a crafted LABEL value (set via the Dockerfile LABEL instruction); and (2) the node's containerd CRI setup must include a plugin that consumes container labels for operations, specifically the restart-monitor path that maps a label to a binary:// logger URI which is executed. … Additional conditions and limiting factors are described in the full assessment.
Risk Assessment The vendor CVSS 4.0 score is 9.4 (critical) with vector AV:L/AC:L/AT:N/PR:N/UI:N and full high impact to both the vulnerable system (VC/VI/VA:H) and subsequent systems (SC/SI/SA:H), reflecting a container-to-host escape. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in.
Exploit Scenario An attacker publishes (or convinces a victim to pull) a container image whose Dockerfile contains a crafted LABEL whose value encodes a binary:// command; when the image is run on a node whose CRI restart-monitor plugin consumes that label, containerd executes the attacker's command as host root, escaping the container. In a multi-tenant Kubernetes cluster, a tenant permitted to schedule pods with arbitrary image references could weaponize this to compromise the node. …
Remediation Vendor-released patches exist - upgrade containerd to the fixed release for your branch: 1.7.33, 2.0.10, 2.1.9, 2.2.5, or 2.3.2 (per GHSA-xhf5-7wjv-pqxp, https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp). … Detailed patch versions, workarounds, and compensating controls in full report.
Sign in to read full assessment

Recommended ActionAI

Within 24 hours: Inventory all containerd deployments; identify versions in use and which nodes have label-consuming plugins enabled (particularly restart-monitor). …

Sign in for detailed remediation steps and compensating controls.

Threat intelligence, references, and detailed analysis are available after sign-in.

More in Containerd

View all
CVE-2026-53492 HIGH
8.4 Jun 19

Kubernetes device-plugin and resource-allocation enforcement can be bypassed in containerd by a namespace user holding p
CVE-2026-53489 HIGH
8.2 Jun 19

Arbitrary host file disclosure in containerd's CRI plugin lets an attacker read any file on the Kubernetes node via `kub
CVE-2026-50195 MEDIUM
5.6 Jun 19

Checkpoint image poisoning in containerd's CRI implementation allows an attacker with pod-creation permissions to corrup
CVE-2026-47262 MEDIUM
5.3 Jun 19

Memory exhaustion via maliciously crafted container image in containerd causes an OOM kill of the containerd process, re
CVE-2024-40635 MEDIUM
4.6 Mar 17

containerd is an open-source container runtime. Rated medium severity (CVSS 4.6), this vulnerability is low attack compl
CVE-2025-64329 MEDIUM
6.9 Nov 07

containerd is an open-source container runtime. Rated medium severity (CVSS 6.9), this vulnerability is no authenticatio
CVE-2024-25621 HIGH
7.3 Nov 06

containerd is an open-source container runtime. Rated high severity (CVSS 7.3), this vulnerability is low attack complex
CVE-2025-47291 MEDIUM
4.6 May 21

containerd is an open-source container runtime. Rated medium severity (CVSS 4.6), this vulnerability is no authenticatio
CVE-2025-47290 HIGH
7.6 May 20

containerd is a container runtime. Rated high severity (CVSS 7.6), this vulnerability is remotely exploitable, no authen

Same weakness CWE-20 – Improper Input Validation

View all
CVE-2021-44228 CRITICAL POC
10.0
CVE-2024-3400 CRITICAL POC
10.0
CVE-2022-47966 CRITICAL POC
9.8
CVE-2009-0927 HIGH POC
8.8
CVE-2019-0604 CRITICAL POC
9.8
CVE-2018-0171 CRITICAL POC
9.8
CVE-2025-54236 CRITICAL POC
9.1
CVE-2025-34100 CRITICAL POC
9.3

Same technique Information Disclosure

View all
CVE-2025-24813 CRITICAL POC
9.8
CVE-2015-1701 HIGH POC
7.8
CVE-2014-6324 HIGH POC
8.8
CVE-2017-0213 HIGH POC
7.3
CVE-2016-7255 HIGH POC
7.8
CVE-2010-0232 HIGH POC
7.8
CVE-2025-30066 HIGH POC
8.6
CVE-2025-54236 CRITICAL POC
9.1

Vendor StatusVendor

SUSE

Severity: Important
Product Status
SUSE Package Hub 15 SP7 Fixed
openSUSE Tumbleweed Fixed
SLES15-SP5-CHOST-BYOS-SAP-CCloud Affected
SLES15-SP6-CHOST-BYOS Affected
SLES15-SP6-CHOST-BYOS-Aliyun Affected

Share

EUVD-2026-40860 vulnerability details – vuln.today
Back

This site uses cookies essential for authentication and security. No tracking or analytics cookies are used. Privacy Policy