tocsin

Go/github.com/containerd/containerd/v2 CVE-2026-46680: unknown, EPSS 0.16%

containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.9 or later.

go get github.com/containerd/containerd/v2@v2.0.9
go get github.com/containerd/containerd/v2@v2.2.4
go get github.com/containerd/containerd/v2@v2.3.1

Affected

introducedfixedlast affected
2.0.42.0.9-
2.1.0-beta.02.2.4-
2.3.0-beta.02.3.1-

Fixed versions

2.0.92.2.42.3.1

Sources

CVE-2026-46680 · published · modified · JSON