Go/github.com/containerd/containerd CVE-2026-95837: high 7.8

containerd CRI plugin: Checkpoint restore bypasses destination security context in github.com/containerd/containerd

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6791
• nvd: CVE-2026-95837
• https://github.com/containerd/containerd/security/advisories/GHSA-p7v4-vr35-mj6f
• https://github.com/containerd/containerd/commit/928c03c6898cad95f795300281fdff0dbc55a32f
• https://github.com/containerd/containerd/pull/13913

CVE-2026-95837 · published 2026-10-19T21:08:35Z · modified 2026-10-19T21:31:38.313663029Z · JSON