tocsin

Go/github.com/containerd/containerd/v2 CVE-2026-53488: high, EPSS 0.18%

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.10 or later.

go get github.com/containerd/containerd/v2@v2.0.10
go get github.com/containerd/containerd/v2@v2.1.9
go get github.com/containerd/containerd/v2@v2.2.5
go get github.com/containerd/containerd/v2@v2.3.2

Affected

introducedfixedlast affected
2.0.02.0.10-
2.1.02.1.9-
2.2.02.2.5-
2.3.02.3.2-

Fixed versions

2.0.102.1.92.2.52.3.2

Sources

CVE-2026-53488 · published · modified · JSON