Detections
Analytics

Bottlerocket: bottlerocket-containerd-2.1, containerd-2.1: security update to 2.1.8bottlerocket-containerd-2.2, containerd-2.2: security update to 2.2.4

medium Tenable Cloud Security Plugin ID 443925

Description

There are packages installed that are affected by a vulnerability referenced in the following CVE:

 - containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a
 vulnerability in the CRI checkpoint import process where it fails to validate the image references
 specified within a checkpoint image's configuration. An attacker with permissions to create pods can use a
 crafted checkpoint image to force containerd to pull a malicious image and assign it an arbitrary local
 tag, thereby poisoning the node's local image cache. Subsequently, if other pods on the same node attempt
 to use the poisoned tag with an IfNotPresent (or Never) pull policy, they will unknowingly execute the
 attacker's malicious image instead of the legitimate one. This can lead to a compromise of the affected
 pods, allowing the attacker to execute arbitrary code under the victim pod's identity. This issue has been
 fixed in versions 2.3.2, 2.2.5 and 2.1.9. (CVE-2026-50195)

Solution

Update the bottlerocket-containerd-2.1 library and its related packages to version 2.1.8 or later.

Plugin Details

Severity: Medium

ID: 443925

Version: Revision 1.3

Type: Local

Published: 6/25/2026

Updated: 7/6/2026

Supported Sensors: Tenable Cloud Security, Tenable Self-Hosted Container Security

Risk Information

VPR

Risk Factor: High

Score: 7

Percentile: 98.3

CVSS v2

Risk Factor: High

Base Score: 9

Temporal Score: 6.7

Vector: CVSS2#AV:N/AC:L/Au:S/C:C/I:C/A:C

CVSS Score Source: CVE-2026-50195

CVSS v3

Risk Factor: Critical

Base Score: 9.9

Temporal Score: 8.6

Vector: CVSS:3.0/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Temporal Vector: CVSS:3.0/E:U/RL:O/RC:C

CVSS v4

Risk Factor: Medium

Base Score: 5.6

Threat Score: 1.4

Threat Vector: CVSS:4.0/E:U

Vector: CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:N/VI:L/VA:N/SC:H/SI:H/SA:L

Vulnerability Information

Exploit Ease: No known exploits are available

Vulnerability Publication Date: 6/19/2026

Reference Information

CVE: CVE-2026-50195