containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the image references specified within a checkpoint image's configuration. An attacker with permissions to create pods can use a crafted checkpoint image to force containerd to pull a malicious image and assign it an arbitrary local tag, thereby poisoning the node's local image cache. Subsequently, if other pods on the same node attempt to use the poisoned tag with an IfNotPresent (or Never) pull policy, they will unknowingly execute the attacker's malicious image instead of the legitimate one. This can lead to a compromise of the affected pods, allowing the attacker to execute arbitrary code under the victim pod's identity. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.

The remote openSUSE 16 host has a package installed that is affected by multiple vulnerabilities as referenced in the openSUSE-SU-2026:21072-1 advisory.

    This update for trivy fixes the following issues

    Update to version 0.71.2:

    - CVE-2026-44740: github.com/go-git/go-billy/v5: improper input handling in many components can lead to     DoS via infinite       loops, panics or resource consumption (bsc#1267268).
    - CVE-2026-46680: github.com/containerd/containerd/v2/pkg/oci: containerd user ID handling bypass allows     runAsNonRoot       evasion (bsc#1268356).
    - CVE-2026-47262: github.com/containerd/containerd/v2/pkg/oci: Denial of Service (DoS) condition via a     maliciously       crafted image (bsc#1268440).
    - CVE-2026-50195: containerd: fails to validate the image references specified within a checkpoint image's       configuration (bsc#1268399).
    - CVE-2026-53488: containerd: CRI plugin propagates labels from an image config to a container without     validation       (bsc#1268400).
    - CVE-2026-53489: containerd: CRI plugin restores container.log from a checkpoint image without validating     a symlinked       path (bsc#1268404).
    - CVE-2026-53492: containerd: improperly trusts Container Device Interface (CDI) annotations found within     untrusted       checkpoint image metadata during container restoration (bsc#1268403).

    Changes for trivy:

     * release: v0.71.2 [release/v0.71] (#10871)
     * fix(deps): bump alpine to 3.24.1 [backport: release/v0.71] (#10870)
     * chore(deps): bump the common group with 4 updates [backport: release/v0.71] (#10867)
     * fix(oci): validate artifact filename
     * fix: forward ospkg detector options through ospkg.NewScanner
     * fix(vex): load VEX documents from within the repository        directory
     * fix: surface the original analysis error instead of context        cancellation
     * ci: expect GitHub App bot as backport PR author

Tenable has extracted the preceding description block directly from the SUSE security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of containerd installed on the remote host is prior to 2.1.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2NITRO-ENCLAVES-2026-113 advisory.

    Memory exhaustion DoS causing OOM kill of containerd process

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq (CVE-2026-47262)

    Image cache poisoning via unvalidated checkpoint image references, enabling cross-pod code execution

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574 (CVE-2026-50195)

    Arbitrary host command execution through unvalidated image config labels propagated to containers

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp (CVE-2026-53488)

    Arbitrary file read on host via symlinked container log paths during checkpoint restore

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388 (CVE-2026-53489)

    Device and host mount injection via CDI annotations in checkpoint metadata (requires CDI enabled on node)

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc (CVE-2026-53492)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of containerd installed on the remote host is prior to 2.1.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2ECS-2026-128 advisory.

    Memory exhaustion DoS causing OOM kill of containerd process

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq (CVE-2026-47262)

    Image cache poisoning via unvalidated checkpoint image references, enabling cross-pod code execution

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574 (CVE-2026-50195)

    Arbitrary host command execution through unvalidated image config labels propagated to containers

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp (CVE-2026-53488)

    Arbitrary file read on host via symlinked container log paths during checkpoint restore

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388 (CVE-2026-53489)

    Device and host mount injection via CDI annotations in checkpoint metadata (requires CDI enabled on node)

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc (CVE-2026-53492)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Fedora 45 host has a package installed that is affected by multiple vulnerabilities as referenced in the FEDORA-2026-dc2cbc1bc8 advisory.

    Automatic update for containerd-2.3.2-1.fc45.

    ##### **Changelog**

    ```
    * Fri Jun 26 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.2-1
    - Update to release v2.3.2
    - Resolves: rhbz#2464270
    - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
    - Resolves CVE-2026-35469: rhbz#2467593
    - Resolves CVE-2026-50195
    - Resolves CVE-2026-53488
    - Resolves CVE-2026-53492
    - Resolves CVE-2026-53489
    - Resolves CVE-2026-47262
    - Upstream fixes
    * Thu May 21 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.1-1
    - Update to release v2.3.1
    - Resolves: rhbz#2464270
    - Upstream feature enhancements and fixes
    - Resolves CVE-2026-34986: rhbz#2455637, rhbz#2455646
    - Resolves CVE-2026-35469: rhbz#2467593
    * Thu May 21 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-2
    - Build shim as static-pie
    - Build shim as static using static-pie to retain pie benefits and static       build. See https://github.com/containerd/containerd/discussions/13340#dis       cussioncomment-16883392 for additional information.
    * Fri May  1 2026 Bradley G Smith <bradley.g.smith@gmail.com> - 2.3.0-1
    - Update to release v2.3.0
    - Refreshed spec file using go2rpm
    - Build now using gobuild macro for most binaries.
    - 'go build' is used for containerd-shim-runc-v2 to emulate makefile static       build

    ```

Tenable has extracted the preceding description block directly from the Fedora security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8473-1 advisory.

    It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could     possibly use this issue to cause containerd to enter an infinite loop, resulting in a denial of service.
    (CVE-2026-33814)

    Jakub Ciolek and Kyle Elliott discovered that containerd incorrectly handled group parsing when creating     containers from images. An attacker could possibly use this issue to cause containerd to consume excessive     memory, resulting in a denial of service. (CVE-2026-47262)

    Henry Beberman and Robert Prast discovered that containerd incorrectly validated image references when     importing container checkpoints. An attacker could possibly use this issue to poison the local image cache     and execute arbitrary code in other pods. (CVE-2026-50195)

    Robert Prast discovered that containerd incorrectly propagated labels from image configurations to     containers. An attacker could possibly use this issue to execute arbitrary code on the host.
    (CVE-2026-53488)

    Yuming Zhang, Song Li, Sangwon Ryu, Henry Beberman, Robert Prast, Kyle Elliott and Zhenchen Wang     discovered that containerd incorrectly validated symlinked paths when restoring container checkpoints. An     attacker could possibly use this issue to read arbitrary files on the host, resulting in information     disclosure. (CVE-2026-53489)

    Robert Prast discovered that containerd incorrectly trusted device interface annotations when restoring     container checkpoints. An attacker could possibly use this issue to bypass resource allocation     restrictions and inject devices or host mounts into a container. (CVE-2026-53492)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The remote Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS host has a package installed that is affected by multiple vulnerabilities as referenced in the USN-8472-1 advisory.

    It was discovered that containerd incorrectly handled HTTP/2 SETTINGS frames. A remote attacker could     possibly use this issue to cause containerd to enter an infinite loop, resulting in a denial of service.
    (CVE-2026-33814)

    Jakub Ciolek and Kyle Elliott discovered that containerd incorrectly handled group parsing when creating     containers from images. An attacker could possibly use this issue to cause containerd to consume excessive     memory, resulting in a denial of service. (CVE-2026-47262)

    Henry Beberman and Robert Prast discovered that containerd incorrectly validated image references when     importing container checkpoints. An attacker could possibly use this issue to poison the local image cache     and execute arbitrary code in other pods. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS,     Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-50195)

    Robert Prast discovered that containerd incorrectly propagated labels from image configurations to     containers. An attacker could possibly use this issue to execute arbitrary code on the host.
    (CVE-2026-53488)

    Yuming Zhang, Song Li, Sangwon Ryu, Henry Beberman, Robert Prast, Kyle Elliott and Zhenchen Wang     discovered that containerd incorrectly validated symlinked paths when restoring container checkpoints. An     attacker could possibly use this issue to read arbitrary files on the host, resulting in information     disclosure. This issue only affected Ubuntu 22.04 LTS, Ubuntu 24.04 LTS, Ubuntu 25.10 and Ubuntu 26.04     LTS. (CVE-2026-53489)

    Robert Prast discovered that containerd incorrectly trusted device interface annotations when restoring     container checkpoints. An attacker could possibly use this issue to bypass resource allocation     restrictions and inject devices or host mounts into a container. This issue only affected Ubuntu 22.04     LTS, Ubuntu 24.04 LTS, Ubuntu 25.10 and Ubuntu 26.04 LTS. (CVE-2026-53492)

Tenable has extracted the preceding description block directly from the Ubuntu security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by a vulnerability referenced in the following CVE:

  - containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a
    vulnerability in the CRI checkpoint import process where it fails to validate the image references
    specified within a checkpoint image's configuration. An attacker with permissions to create pods can use a
    crafted checkpoint image to force containerd to pull a malicious image and assign it an arbitrary local
    tag, thereby poisoning the node's local image cache. Subsequently, if other pods on the same node attempt
    to use the poisoned tag with an IfNotPresent (or Never) pull policy, they will unknowingly execute the
    attacker's malicious image instead of the legitimate one. This can lead to a compromise of the affected
    pods, allowing the attacker to execute arbitrary code under the victim pod's identity. This issue has been
    fixed in versions 2.3.2, 2.2.5 and 2.1.9. (CVE-2026-50195)

The version of Containerd on the remote host is 2.1.x prior to 2.1.9, 2.2.x prior to 2.2.5, or 2.3.x prior to 2.3.2.
It is, therefore, affected by multiple vulnerabilities:

  - containerd's CRI checkpoint import process contains a vulnerability where it fails to validate the image     references specified within a checkpoint image's configuration. An attacker with permissions to create pods can     use a crafted checkpoint image to force containerd to pull a malicious image and assign it an arbitrary local     tag, thereby poisoning the node's local image cache. (CVE-2026-50195)

  - A bug was found in containerd where the CRI plugin restores container.log from a checkpoint image without     validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs.
    (CVE-2026-53489)

  - containerd's CRI implementation improperly trusts Container Device Interface (CDI) annotations found within     untrusted checkpoint image metadata during container restoration. When restoring a container from a checkpoint,     containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the pod's     create-time specification. This allows a user with pod creation permissions to bypass standard Kubernetes     resource allocation and device plugin enforcement, injecting arbitrary CDI edits into the restored container.
    (CVE-2026-53492)

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

The version of containerd installed on the remote host is prior to 2.1.7-1. It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2DOCKER-2026-133 advisory.

    Memory exhaustion DoS causing OOM kill of containerd process

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq (CVE-2026-47262)

    Image cache poisoning via unvalidated checkpoint image references, enabling cross-pod code execution

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574 (CVE-2026-50195)

    Arbitrary host command execution through unvalidated image config labels propagated to containers

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp (CVE-2026-53488)

    Arbitrary file read on host via symlinked container log paths during checkpoint restore

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388 (CVE-2026-53489)

    Device and host mount injection via CDI annotations in checkpoint metadata (requires CDI enabled on node)

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc (CVE-2026-53492)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1897 advisory.

    Memory exhaustion DoS causing OOM kill of containerd process

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq (CVE-2026-47262)

    Image cache poisoning via unvalidated checkpoint image references, enabling cross-pod code execution

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-cvxm-645q-p574 (CVE-2026-50195)

    Arbitrary host command execution through unvalidated image config labels propagated to containers

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp (CVE-2026-53488)

    Arbitrary file read on host via symlinked container log paths during checkpoint restore

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388 (CVE-2026-53489)

    Device and host mount injection via CDI annotations in checkpoint metadata (requires CDI enabled on node)

    NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc (CVE-2026-53492)

Tenable has extracted the preceding description block directly from the tested product security advisory.

Note that Nessus has not tested for these issues but has instead relied only on the application's self-reported version number.

There are packages installed that are affected by multiple vulnerabilities referenced in the following CVEs:

  - containerd is an open-source container runtime. Versions prior to 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2,
    contain a vulnerability that allows a maliciously crafted image to cause a Denial of Service (DoS)
    condition. When creating a container from this image, memory exhaustion occurs, leading to an Out Of
    Memory (OOM) kill of the containerd process. This renders the container runtime API unavailable and can
    disrupt clients such as the Docker Engine or Kubernetes control-plane components. This issue has been
    fixed in versions 1.7.33, 2.0.10, 2.1.9, 2.2.5 and 2.3.2. (CVE-2026-47262)

  - containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a
    vulnerability in the CRI checkpoint import process where it fails to validate the image references
    specified within a checkpoint image's configuration. An attacker with permissions to create pods can use a
    crafted checkpoint image to force containerd to pull a malicious image and assign it an arbitrary local
    tag, thereby poisoning the node's local image cache. Subsequently, if other pods on the same node attempt
    to use the poisoned tag with an IfNotPresent (or Never) pull policy, they will unknowingly execute the
    attacker's malicious image instead of the legitimate one. This can lead to a compromise of the affected
    pods, allowing the attacker to execute arbitrary code under the victim pod's identity. This issue has been
    fixed in versions 2.3.2, 2.2.5 and 2.1.9. (CVE-2026-50195)

  - containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and
    2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a
    container without validation. This may result in executing an arbitrary command on the host, via a plugin
    that consumes container labels for some operations. This issue has been fixed in versions 1.7.33, 2.3.2,
    2.2.5, 2.1.9, and 2.0.10. (CVE-2026-53488)

  - containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug
    where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path.
    This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in
    versions 2.3.2, 2.2.5 and 2.1.9. (CVE-2026-53489)

  - containerd is an open-source container runtime. In Versions prior to 2.3.2, 2.2.5 and 2.1.9, the CRI
    implementation improperly trusts Container Device Interface (CDI) annotations found within untrusted
    checkpoint image metadata during container restoration. When restoring a container from a checkpoint,
    containerd preserves CDI-related annotations from the checkpoint archive rather than relying solely on the
    pod's create-time specification. This allows a user with pod creation permissions to bypass standard
    Kubernetes resource allocation and device plugin enforcement, injecting arbitrary CDI edits (such as
    device nodes and host mounts) into the restored container. Successful exploitation requires that the node
    has CDI enabled and contains a matching host CDI specification for the requested device; environments
    where CDI is disabled or lacking sensitive device specifications are not affected. This issue has been
    fixed in versions 2.3.2, 2.2.5 and 2.1.9. (CVE-2026-53492)

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available.

  - containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a     vulnerability in the CRI checkpoint import process where it fails to validate the image references     specified within a checkpoint image's configuration. An attacker with permissions to create pods can use a     crafted checkpoint image to force containerd to pull a malicious image and assign it an arbitrary local     tag, thereby poisoning the node's local image cache. Subsequently, if other pods on the same node attempt     to use the poisoned tag with an IfNotPresent (or Never) pull policy, they will unknowingly execute the     attacker's malicious image instead of the legitimate one. This can lead to a compromise of the affected     pods, allowing the attacker to execute arbitrary code under the victim pod's identity. This issue has been     fixed in versions 2.3.2, 2.2.5 and 2.1.9. (CVE-2026-50195)

Note that Nessus relies on the presence of the package as reported by the vendor.

ID	Name	Product	Family	Severity
324052	openSUSE 16 Security Update : trivy (openSUSE-SU-2026:21072-1)	Nessus	SuSE Local Security Checks	critical
323720	Amazon Linux 2 : containerd, --advisory ALAS2NITRO-ENCLAVES-2026-113 (ALASNITRO-ENCLAVES-2026-113)	Nessus	Amazon Linux Local Security Checks	critical
323718	Amazon Linux 2 : containerd, --advisory ALAS2ECS-2026-128 (ALASECS-2026-128)	Nessus	Amazon Linux Local Security Checks	critical
323660	Fedora 45 : containerd (2026-dc2cbc1bc8)	Nessus	Fedora Local Security Checks	critical
322952	Ubuntu 25.10 / 26.04 LTS : containerd-stable vulnerabilities (USN-8473-1)	Nessus	Ubuntu Local Security Checks	critical
322949	Ubuntu 20.04 LTS / 22.04 LTS / 24.04 LTS / 25.10 / 26.04 LTS : containerd vulnerabilities (USN-8472-1)	Nessus	Ubuntu Local Security Checks	critical
443925	Bottlerocket: bottlerocket-containerd-2.1, containerd-2.1: security update to 2.1.8bottlerocket-containerd-2.2, containerd-2.2: security update to 2.2.4	Tenable Cloud Security	Bottlerocket Local Security Checks	medium
443925	Bottlerocket: bottlerocket-containerd-2.1, containerd-2.1: security update to 2.1.8bottlerocket-containerd-2.2, containerd-2.2: security update to 2.2.4	Tenable Self-Hosted Container Security	Bottlerocket Local Security Checks	medium
322408	Containerd 2.1.x < 2.1.9 / 2.2.x < 2.2.5 / 2.3.x < 2.3.2 Multiple Vulnerabilities	Nessus	Misc.	high
322038	Amazon Linux 2 : containerd, --advisory ALAS2DOCKER-2026-133 (ALASDOCKER-2026-133)	Nessus	Amazon Linux Local Security Checks	critical
321991	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-1897)	Nessus	Amazon Linux Local Security Checks	critical
443745	Alpine: multiple containerd packages: security update to 2.3.2-r0	Tenable Cloud Security	Alpine Linux Local Security Checks	critical
443745	Alpine: multiple containerd packages: security update to 2.3.2-r0	Tenable Self-Hosted Container Security	Alpine Linux Local Security Checks	critical
443700	SCA: security update for github.com/containerd/containerd/v2 (GHSA-cvxm-645q-p574)	Tenable Cloud Security	SCA Checks	medium
443700	SCA: security update for github.com/containerd/containerd/v2 (GHSA-cvxm-645q-p574)	Tenable Self-Hosted Container Security	SCA Checks	medium
321807	Linux Distros Unpatched Vulnerability : CVE-2026-50195	Nessus	Misc.	medium

Detections

Analytics

CVE-2026-50195

medium

Tenable Plugins

critical

critical

critical

critical

critical

critical

medium

medium

high

critical

critical

critical

critical

medium

medium

medium