GO-2026-5378
containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd
En bref
- Publiée
- Mise à jour
- CVE
- CVE-2026-46680
- Alias
- GHSA-fqw6-gf59-qr4w
Description
containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd
Paquets affectés
| Paquet | Versions |
|---|---|
| Go · github.com/containerd/containerd | introduced 1.7.27, fixed 1.7.32 |
| Go · github.com/containerd/containerd/v2 | introduced 2.0.4, fixed 2.0.9, introduced 2.1.0-beta.0, fixed 2.2.4, introduced 2.3.0-beta.0, fixed 2.3.1 |
Références
Sources
| Source | Licence |
|---|---|
| OSV.dev | CC-BY 4.0 — Go Vulnerability Database |