CVE-2026-95837High· 7.8▾ Twilightcontainerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing th…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 42.9 · likelihood 0 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake.
Exploit-prediction probability, daily snapshots since Oct 13.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via NVD
0.1%
Last analysed / modified upstream
containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a container from a crafted checkpoint can supply restored credentials, capabilities, no_new_privs, and seccomp state. The restored process can run as root with full capabilities and no enforced seccomp filters while CRI status reports the requested configuration. Systems that do not use CRI checkpoint restore are not affected. This issue is fixed in versions 2.2.7 and 2.3.4.
Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
Affected packages:
github.com/containerd/containerd/v2 >= 2.1.0, < 2.2.7github.com/containerd/containerd/v2 >= 2.3.0, < 2.3.4Patched in:
github.com/containerd/containerd/v2 2.2.7github.com/containerd/containerd/v2 2.3.4Source: https://github.com/advisories/GHSA-p7v4-vr35-mj6f
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-53495Medium· 6.8containerd is an open-source container runtime
CVE-2026-95838Medium· 4.6containerd is an open-source container runtime
CVE-2026-53493Medium· 6.9containerd is an open-source container runtime
CVE-2026-46680High· 7.8containerd is an open-source container runtime
CVE-2026-102676High· 8.3Electron is a framework for writing cross-platform desktop applications using JavaScript, HTML and CSS
GHSA-7ww5-4wqc-m92cMediumcontainerd allows RAPL to be accessible to a container