CVE-2026-53488

4 advisories.

Go/github.com/containerd/containerd CVE-2026-53488: high, EPSS 0.18%

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

Action: Upgrade github.com/containerd/containerd to 1.7.33 or later.

go get github.com/containerd/containerd@v1.7.33

Affected

introduced	fixed	last affected
1.7.0	1.7.33	-

Fixed versions

1.7.33

Sources

CVE-2026-53488 · published 2026-06-19T19:35:31Z · modified 2026-09-10T03:51:09.792384728Z · JSON

Go/github.com/containerd/containerd/v2 CVE-2026-53488: high, EPSS 0.18%

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.10 or later.

go get github.com/containerd/containerd/v2@v2.0.10

go get github.com/containerd/containerd/v2@v2.1.9

go get github.com/containerd/containerd/v2@v2.2.5

go get github.com/containerd/containerd/v2@v2.3.2

Affected

introduced	fixed	last affected
2.0.0	2.0.10	-
2.1.0	2.1.9	-
2.2.0	2.2.5	-
2.3.0	2.3.2	-

Fixed versions

2.0.10

2.1.9

2.2.5

2.3.2

Sources

CVE-2026-53488 · published 2026-06-19T19:35:31Z · modified 2026-09-10T03:51:09.792384728Z · JSON

Go/github.com/containerd/containerd CVE-2026-53488: unknown, EPSS 0.18%

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Action: Upgrade github.com/containerd/containerd to 1.7.33 or later.

go get github.com/containerd/containerd@v1.7.33

Affected

introduced	fixed	last affected
1.7.0	1.7.33	-

Fixed versions

1.7.33

Sources

CVE-2026-53488 · published 2026-06-25T22:34:41Z · modified 2026-06-26T19:59:21.410839900Z · JSON

Go/github.com/containerd/containerd/v2 CVE-2026-53488: unknown, EPSS 0.18%

containerd CRI — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull in github.com/containerd/containerd

Action: Upgrade github.com/containerd/containerd/v2 to 2.0.10 or later.

go get github.com/containerd/containerd/v2@v2.0.10

go get github.com/containerd/containerd/v2@v2.1.9

go get github.com/containerd/containerd/v2@v2.2.5

go get github.com/containerd/containerd/v2@v2.3.2

Affected

introduced	fixed	last affected
2.0.0	2.0.10	-
2.1.0	2.1.9	-
2.2.0	2.2.5	-
2.3.0	2.3.2	-

Fixed versions

2.0.10

2.1.9

2.2.5

2.3.2

Sources

CVE-2026-53488 · published 2026-06-25T22:34:41Z · modified 2026-06-26T19:59:21.410839900Z · JSON