CVE-2026-95837

Go/github.com/containerd/containerd/v2 CVE-2026-95837: high 7.8

containerd CRI plugin: Checkpoint restore bypasses destination security context

Action: Upgrade github.com/containerd/containerd/v2 to 2.2.7 or later.

go get github.com/containerd/containerd/v2@v2.2.7

go get github.com/containerd/containerd/v2@v2.3.4

Affected

Fixed versions

Sources

• osv: GHSA-p7v4-vr35-mj6f
• https://github.com/containerd/containerd/security/advisories/GHSA-p7v4-vr35-mj6f
• https://nvd.nist.gov/vuln/detail/CVE-2026-95837
• https://github.com/containerd/containerd/pull/13913
• https://github.com/containerd/containerd/commit/928c03c6898cad95f795300281fdff0dbc55a32f
• https://github.com/containerd/containerd

CVE-2026-95837 · published 2026-10-15T20:21:57Z · modified 2026-10-19T21:41:22.608698004Z · JSON

Go/github.com/containerd/containerd CVE-2026-95837: high 7.8

containerd CRI plugin: Checkpoint restore bypasses destination security context in github.com/containerd/containerd

Action: No fix published. Pin and monitor.

Affected

Fixed versions

No fixed version in the source.

Sources

• osv: GO-2026-6791
• nvd: CVE-2026-95837
• https://github.com/containerd/containerd/security/advisories/GHSA-p7v4-vr35-mj6f
• https://github.com/containerd/containerd/commit/928c03c6898cad95f795300281fdff0dbc55a32f
• https://github.com/containerd/containerd/pull/13913

CVE-2026-95837 · published 2026-10-19T21:08:35Z · modified 2026-10-19T21:31:38.313663029Z · JSON