{"action":"Upgrade github.com/opencontainers/runc to 1.1.12 or later.","affected":[{"fixed":"1.1.12","introduced":"1.0.0-rc93"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2024-21626"],"ecosystem":"Go","epss":0.18923,"exploited":false,"fixed_versions":["1.1.12"],"ghsa_id":"GHSA-xr7r-f8xq-vfvv","id":"tcs_01M5KFSP7B1B3GFTJ1C4M5XFJR","modified_at":"2026-09-10T03:50:05.196975581Z","published_at":"2024-01-31T22:44:08Z","references":["https://osv.dev/vulnerability/GHSA-xr7r-f8xq-vfvv","https://github.com/opencontainers/runc/security/advisories/GHSA-xr7r-f8xq-vfvv","https://nvd.nist.gov/vuln/detail/CVE-2024-21626","https://github.com/opencontainers/runc/commit/02120488a4c0fc487d1ed2867e901eeed7ce8ecf","https://access.redhat.com/errata/RHSA-2024:0645","https://access.redhat.com/errata/RHSA-2024:4597","https://access.redhat.com/errata/RHSA-2025:0115","https://access.redhat.com/errata/RHSA-2025:0650","https://access.redhat.com/errata/RHSA-2025:1711","https://access.redhat.com/errata/RHSA-2025:2441","https://access.redhat.com/errata/RHSA-2025:2701","https://access.redhat.com/errata/RHSA-2025:2710","https://access.redhat.com/security/cve/CVE-2024-21626","https://bugzilla.redhat.com/show_bug.cgi?id=2258725","https://github.com/opencontainers/runc","https://github.com/opencontainers/runc/releases/tag/v1.1.12","https://lists.debian.org/debian-lts-announce/2024/02/msg00005.html","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/2NLXNE23Q5ESQUAI22Z7A63JX2WMPJ2J","https://lists.fedoraproject.org/archives/list/package-announce@lists.fedoraproject.org/message/SYMO3BANINS6RGFQFKPRG4FIOJ7GWYTL","https://security.access.redhat.com/data/csaf/v2/vex/2024/cve-2024-21626.json","https://www.vicarius.io/vsociety/posts/leaky-vessels-part-1-cve-2024-21626","https://access.redhat.com/errata/RHSA-2024:0662","https://access.redhat.com/errata/RHSA-2024:0666","https://access.redhat.com/errata/RHSA-2024:0670","https://access.redhat.com/errata/RHSA-2024:0684","https://access.redhat.com/errata/RHSA-2024:0717","https://access.redhat.com/errata/RHSA-2024:0748","https://access.redhat.com/errata/RHSA-2024:0752","https://access.redhat.com/errata/RHSA-2024:0755","https://access.redhat.com/errata/RHSA-2024:0756","https://access.redhat.com/errata/RHSA-2024:0757","https://access.redhat.com/errata/RHSA-2024:0758","https://access.redhat.com/errata/RHSA-2024:0759","https://access.redhat.com/errata/RHSA-2024:0760","https://access.redhat.com/errata/RHSA-2024:0764","https://access.redhat.com/errata/RHSA-2024:10149","https://access.redhat.com/errata/RHSA-2024:10520","https://access.redhat.com/errata/RHSA-2024:10525","https://access.redhat.com/errata/RHSA-2024:10841","https://access.redhat.com/errata/RHSA-2024:1270","http://packetstormsecurity.com/files/176993/runc-1.1.11-File-Descriptor-Leak-Privilege-Escalation.html","http://www.openwall.com/lists/oss-security/2024/02/01/1","http://www.openwall.com/lists/oss-security/2024/02/02/3"],"severity":{"label":"high","score":8.6},"sources":[{"source":"osv","source_id":"GHSA-xr7r-f8xq-vfvv","url":"https://osv.dev/vulnerability/GHSA-xr7r-f8xq-vfvv"}],"summary":"runc vulnerable to container breakout through process.cwd trickery and leaked fds"}