Skip to content
Fencer Intel
high 8.8

CVE-2026-53488 json

containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull

published 4mo ago modified 2mo ago also GHSA-xhf5-7wjv-pqxp , GO-2026-5758 , EUVD-2026-40860

cvss
8.8
version 3.1, NVD
cisa kev
Not listed
not in CISA's catalog
epss
0.2%
EPSS 0.2% chance of exploitation in 30 days, percentile 7%
public exploits
0
none known

Summary

containerd is an open-source container runtime. In versions prior to 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10 the CRI plugin propagates labels from an image config (LABEL instruction in Dockerfile) to a container without validation. This may result in executing an arbitrary command on the host, via a plugin that consumes container labels for some operations. This issue has been fixed in versions 1.7.33, 2.3.2, 2.2.5, 2.1.9, and 2.0.10.

Patch / fix

  • go github.com/containerd/containerd 1.7.33
  • go github.com/containerd/containerd/v2 2.0.10, 2.1.9, 2.2.5, 2.3.2
  • linuxfoundation containerd 1.7.33, 2.0.10, 2.1.9, 2.2.5, 2.3.2
  • containerd Debian 14 2.1.9+ds1-1

debian advisories DEBIAN-CVE-2026-53488

  • containerd Ubuntu 22.04 LTS 1.6.12-0ubuntu1~22.04.11
  • containerd-app Ubuntu 22.04 LTS 2.2.1-0ubuntu1~22.04.2
  • containerd-app Ubuntu 24.04 LTS 2.2.1-0ubuntu1~24.04.3
  • containerd-app Ubuntu 25.10 2.2.1-0ubuntu1~25.10.2
  • containerd-app Ubuntu 26.04 LTS 2.2.2-0ubuntu1.1
  • containerd-stable Ubuntu 25.10 2.1.6-0ubuntu1~25.10.2
  • containerd-stable Ubuntu 26.04 LTS 2.2.2-0ubuntu1.1
  • containerd Ubuntu Pro 18.04 LTS 1.6.12-0ubuntu1~18.04.1+esm4

ubuntu advisories UBUNTU-CVE-2026-53488

Ubuntu security data © Canonical Ltd., from https://github.com/canonical/ubuntu-security-notices via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • trivy hummingbird 1 0.72.0-0.1.hum1

red hat advisories RHSA-2026:35111

  • containerd Linux Micro 6.1 1.7.29-slfo.1.1_5.1
  • containerd SLES for SAP 15 SP6, SLES for SAP 15 SP5, SLES for SAP 15 SP4 +12 more 1.7.29-150000.149.1
  • containerd Linux Micro 6.0 1.7.29-159998.1.1
  • containerd SLES LTSS Extended Security 12 SP5, SLES 12 SP5-LTSS 1.7.29-16.116.1

suse advisories SUSE-SU-2026:24381-1SUSE-SU-2026:4787-1SUSE-SU-2026:4671-1SUSE-SU-2026:24136-1

  • govulncheck-vulndb openSUSE Leap 16.0 0.0.20260723T184607-160000.1.1
  • containerd openSUSE Leap 16.0 1.7.33-160000.1.1
  • trivy openSUSE Leap 16.0 0.71.2-160000.1.1
  • containerd openSUSE Tumbleweed 1.7.33-1.1
  • trivy openSUSE Tumbleweed 0.71.2-1.1

opensuse advisories openSUSE-SU-2026:21483-1openSUSE-SU-2026:21213-1openSUSE-SU-2026:21072-1openSUSE-SU-2026:11107-1openSUSE-SU-2026:11102-1

  • containerd Alpine 3.24 2.3.2-r0

alpine advisories ALPINE-CVE-2026-53488

Alpine secdb © Alpine Linux, from https://secdb.alpinelinux.org via OSV; changed: normalised to fixed package versions per release. CC BY-SA 4.0

  • containerd2 Azure Linux 3.0 2.2.4-3
  • moby-containerd-cc Azure Linux 3.0 1.7.7-16

azure linux advisories AZL-90167AZL-91587

Azure Linux vulnerability data, Copyright (c) Microsoft Corporation, from https://github.com/microsoft/AzureLinuxVulnerabilityData via OSV, under the MIT licence; changed: normalised to fixed package versions per release. MIT

Is CVE-2026-53488 in your dependencies? Fencer shows which of your repositories are affected as soon as an advisory lands, and opens the fix as a pull request.

Check with Fencer

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2026-53488 updated cvss 8.8

github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin

  • Red Hat Assisted Installer for Red Hat OpenShift Container Platform 2 rhai/assisted-installer-agent-rhel9, assisted/agent-preinstall-image-builder-rhel9
    affected: workaround, no fix available
  • Red Hat Confidential Compute Attestation openshift-sandboxed-containers/osc-monitor-rhel9, openshift-sandboxed-containers/osc-must-gather-rhel9, openshift-sandboxed-containers/osc-podvm-payload-rhel9, openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Deployment Validation Operator dvo/deployment-validation-rhel8-operator Red Hat Kernel Module Management Operator for Red Hat Openshift kmm/kernel-module-management-must-gather-rhel9 Red Hat Machine Deletion Remediation Operator workload-availability/machine-deletion-remediation-rhel9-operator, workload-availability/machine-deletion-remediation-operator-bundle
    affected: workaround, no fix available
  • Red Hat MCP Server for Red Hat OpenShift openshift-mcp-beta/openshift-mcp-server-rhel9 Red Hat Migration Toolkit for Virtualization mtv-candidate/mtv-must-gather-rhel8, migration-toolkit-virtualization/mtv-must-gather-rhel8, migration-toolkit-virtualization/mtv-must-gather-rhel9
    affected: workaround, no fix planned “Will not fix”
  • Red Hat Multicluster Engine for Kubernetes multicluster-engine/assisted-installer-controller-rhel9 Red Hat Node HealthCheck Operator workload-availability/node-healthcheck-must-gather-rhel9
    affected: workaround, no fix available
  • Red Hat OpenShift Developer Tools and Services ocp-tools-4/jenkins-agent-base-rhel8
    affected: workaround, no fix planned “Out of support scope”
  • Red Hat OpenShift Lightspeed openshift-lightspeed/lightspeed-agentic-sandbox-rhel9 Red Hat OpenShift Pipelines openshift-pipelines/pipelines-controller-rhel8, openshift-pipelines/pipelines-entrypoint-rhel8, openshift-pipelines/pipelines-results-watcher-rhel8, openshift-pipelines/pipelines-sidecarlogresults-rhel8 Red Hat OpenShift Serverless openshift-serverless-1/serverless-must-gather-rhel9 Red Hat Power monitoring for Red Hat OpenShift openshift-power-monitoring/power-monitoring-rhel9-operator Red Hat Advanced Cluster Security 4 advanced-cluster-security/rhacs-roxctl-rhel8, advanced-cluster-security/rhacs-rhel8-operator
    affected: workaround, no fix available
  • Red Hat Ansible Automation Platform 2 ansible-automation-platform-25/aap-must-gather-rhel8
    affected: workaround, no fix planned “Will not fix”
show 21 more
  • Red Hat Ceph Storage 6 rhceph/rhceph-promtail-rhel9 Red Hat Ceph Storage 9 rhceph/alloy-rhel10
    affected: workaround, no fix available “Fix deferred”
  • Red Hat OpenShift AI (RHOAI) rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9, rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9, rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9, rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9, rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9, rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9, +11 more
    affected: workaround, no fix planned “Will not fix”
  • Red Hat OpenShift Container Platform 4 openshift-kni/commatrix, openshift4/cnf-tests-rhel8, openshift4/cnf-tests-rhel9, openshift4/network-tools-rhel8, openshift4/network-tools-rhel9, openshift4/ose-olm-rukpak-rhel8, +10 more Red Hat OpenShift Container Platform 5 openshift-kni/commatrix, openshift5/cnf-tests-rhel9, openshift5/ose-console-rhel9, openshift5/network-tools-rhel9, openshift5/oc-mirror-plugin-rhel9, openshift5/ose-cluster-olm-rhel9-operator, +5 more Red Hat OpenShift GitOps openshift-gitops-1/argocd-rhel8, openshift-gitops-1/argocd-rhel9, openshift-gitops-1/must-gather-rhel8, openshift-gitops-1/must-gather-rhel9
    affected: workaround, no fix available, no fix planned “Will not fix”
  • Red Hat OpenShift Virtualization 4 container-native-virtualization/multus-dynamic-networks-rhel9
    affected: workaround, no fix planned “Will not fix”
  • Red Hat multicluster engine for Kubernetes 2.6 multicluster-engine/assisted-installer-rhel8 1783407900, multicluster-engine/assisted-service-8-rhel8 1783332008, multicluster-engine/assisted-service-9-rhel9 1783333268, multicluster-engine/assisted-installer-controller-rhel8 1783407939
    fixed: vendor fix RHSA-2026:36105
  • Red Hat multicluster engine for Kubernetes 2.10 multicluster-engine/assisted-service-9-rhel9 1783350355, multicluster-engine/assisted-installer-agent-rhel9 1783592566
    fixed: vendor fix RHSA-2026:37252
  • Red Hat Multicluster Global Hub 1.4.9 multicluster-globalhub/multicluster-globalhub-agent-rhel9 1784061472, multicluster-globalhub/multicluster-globalhub-grafana-rhel9 1784060681, multicluster-globalhub/multicluster-globalhub-manager-rhel9 1784061010, multicluster-globalhub/multicluster-globalhub-rhel9-operator 1784060515
    fixed: vendor fix RHSA-2026:41030
  • Red Hat Multicluster Global Hub 1.5.8 multicluster-globalhub/multicluster-globalhub-agent-rhel9 1784127491, multicluster-globalhub/multicluster-globalhub-grafana-rhel9 1784562060, multicluster-globalhub/multicluster-globalhub-manager-rhel9 1784128029, multicluster-globalhub/multicluster-globalhub-rhel9-operator 1784127524
    fixed: vendor fix RHSA-2026:42852
  • Red Hat Multicluster Global Hub 1.6.6 multicluster-globalhub/multicluster-globalhub-agent-rhel9 1784152046, multicluster-globalhub/multicluster-globalhub-grafana-rhel9 1784561376, multicluster-globalhub/multicluster-globalhub-manager-rhel9 1784151884, multicluster-globalhub/multicluster-globalhub-rhel9-operator 1784151772
    fixed: vendor fix RHSA-2026:44622
  • Red Hat Multicluster Global Hub 1.7.4 multicluster-globalhub/multicluster-globalhub-agent-rhel9 1784768332, multicluster-globalhub/multicluster-globalhub-agent-rhel9 1785775948, multicluster-globalhub/multicluster-globalhub-grafana-rhel9 1784906628, multicluster-globalhub/multicluster-globalhub-grafana-rhel9 1785442872, multicluster-globalhub/multicluster-globalhub-manager-rhel9 1784768150, multicluster-globalhub/multicluster-globalhub-manager-rhel9 1785773056, +2 more
    fixed: vendor fix RHSA-2026:47149
  • Red Hat OpenShift API for Data Protection 1.3 oadp/oadp-mustgather-rhel9 1785177359
    fixed: vendor fix RHSA-2026:51033
  • Red Hat OpenShift API for Data Protection 1.4 oadp/oadp-mustgather-rhel9 1786946294
    fixed: vendor fix RHSA-2026:59467
  • Red Hat OpenShift API for Data Protection 1.5 oadp/oadp-mustgather-rhel9 1788859896
    fixed: vendor fix RHSA-2026:66022
  • Red Hat Advanced Cluster Management for Kubernetes 2.11 rhacm2/multicluster-operators-channel-rhel9 1787260663, rhacm2/multicluster-operators-subscription-rhel9 1787263584
    fixed: vendor fix RHSA-2026:60387
  • Red Hat Advanced Cluster Management for Kubernetes 2.13 rhacm2/submariner-rhel9-operator 1782933193, rhacm2/multicloud-integrations-rhel9 1784652040, rhacm2/multicluster-operators-channel-rhel9 1784741269, rhacm2/multicluster-operators-subscription-rhel9 1784740143
    fixed: vendor fix RHSA-2026:47737
  • Red Hat Advanced Cluster Management for Kubernetes 2.14 rhacm2/multicluster-operators-channel-rhel9 1787172840, rhacm2/multicluster-operators-subscription-rhel9 1787170830
    fixed: vendor fix RHSA-2026:60388
  • Red Hat Advanced Cluster Management for Kubernetes 2.15 rhacm2/multicluster-operators-channel-rhel9 1784707599, rhacm2/multicluster-operators-subscription-rhel9 1784229508
    fixed: vendor fix RHSA-2026:46903
  • Red Hat Advanced Cluster Management for Kubernetes 2.16 rhacm2/multicluster-operators-channel-rhel9 1786908503, rhacm2/multicluster-operators-subscription-rhel9 1786908777
    fixed: vendor fix RHSA-2026:57191
  • Red Hat Advanced Cluster Management for Kubernetes 2.17 rhacm2/multicluster-operators-channel-rhel9 1787242099, rhacm2/multicluster-operators-subscription-rhel9 1787242108
    fixed: vendor fix RHSA-2026:60386
  • Red Hat Advanced Cluster Security 4.9 advanced-cluster-security/rhacs-main-rhel8 1783357116, advanced-cluster-security/rhacs-scanner-v4-rhel8 1785413210
    fixed: vendor fix RHSA-2026:36319
  • Red Hat Advanced Cluster Security for Kubernetes 4.11 advanced-cluster-security/rhacs-main-rhel9 1783352589, advanced-cluster-security/rhacs-roxctl-rhel9 1783352589, advanced-cluster-security/rhacs-rhel9-operator 1783352589, advanced-cluster-security/rhacs-operator-bundle 1783352589, advanced-cluster-security/rhacs-scanner-v4-rhel9 1783352589
    fixed: vendor fix RHSA-2026:36207

12 more fixed, 48 more not affected in the full advisory

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
4mo ago

Exploit prediction

0.18% chance of exploitation in the next 30 days, higher than 7% of all scored CVEs (FIRST EPSS, 2026-11-11).

CVSS scores

assigned by version score vector
CNA 4.0 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H
CNA 4.0 9.4 CVSS:4.0/AV:L/AC:L/AT:N/PR:N/UI:N/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
NVD 3.1 8.8 CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

Affected packages

ecosystem package affected fixed in
go github.com/containerd/containerd
>=1.7.0, <1.7.33
1.7.33
go github.com/containerd/containerd/v2
>=2.0.0, <2.0.10
>=2.1.0, <2.1.9
>=2.2.0, <2.2.5
>=2.3.0, <2.3.2
2.0.10
2.1.9
2.2.5
2.3.2

Affected products

  • containerd containerd

Classification

Weakness
  • CWE-20 Improper Input Validation
  • CWE-74 Improper Neutralization of Special Elements in Output Used by a Downstream Component

References

Sources

Fencer Intel keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.