Insecure handling of image volumes in containerd CRI plugin
Priority MEDIUM 55CWE-200Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- None
- User interaction
- None
- Attack complexity
- Low
- Impact type
- Information disclosure
- Confidentiality · integrity · availability
- High · None · None
- Fix status
- Partial Red Hat: 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA, GitHub and Red Hat. Impact type from CWE-200.
Summary
containerd is a container runtime available as a daemon for Linux and Windows. A bug was found in containerd prior to versions 1.6.1, 1.5.10, and 1.14.12 where containers launched through containerd’s CRI implementation on Linux with a specially-crafted image configuration could gain access to read-only copies of arbitrary files and directories on the host. This may bypass any policy-based enforcement on container setup (including a Kubernetes Pod Security Policy) and expose potentially sensitive information. Kubernetes and crictl can both be configured to use containerd’s CRI implementation. This bug has been fixed in containerd 1.6.1, 1.5.10, and 1.4.12. Users should update to these versions to resolve the issue.
Why it matters now
EPSS 0.27392 98th percentileScored 2026-11-07
Public exploit Yes 1 exploit referenceTagged by NVD
Fix Partial containerd (containerd): 1.4.13, 1.5.10, 1.6.1github.com/containerd/containerd (Go): 1.4.13, 1.5.10, 1.6.1Red Hat: 1 without a fix
SSVC decision points
Not available: CISA has not published SSVC decision points for this record.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| backstage | containerd | before 1.4.13; 1.5.0 to before 1.5.10; 1.6.0 to before 1.6.1 | 1.4.13, 1.5.10, 1.6.1 | Patch available | CNA |
| — | github.com/containerd/containerd (Go) | before 1.4.13 | 1.4.13 | Patch available | GHSA-crp2-qrr5-8pq7 |
| — | github.com/containerd/containerd (Go) | 1.5.0 to before 1.5.10 | 1.5.10 | Patch available | GHSA-crp2-qrr5-8pq7 |
| — | github.com/containerd/containerd (Go) | 1.6.0 to before 1.6.1 | 1.6.1 | Patch available | GHSA-crp2-qrr5-8pq7 |
- containerd Vendorbackstage Affected before 1.4.13; 1.5.0 to before 1.5.10; 1.6.0 to before 1.6.1 Fixed in 1.4.13, 1.5.10, 1.6.1 Patch available CNA
- github.com/containerd/containerd (Go) Vendor— Affected before 1.4.13 Fixed in 1.4.13 Patch available GHSA-crp2-qrr5-8pq7
- github.com/containerd/containerd (Go) Vendor— Affected 1.5.0 to before 1.5.10 Fixed in 1.5.10 Patch available GHSA-crp2-qrr5-8pq7
- github.com/containerd/containerd (Go) Vendor— Affected 1.6.0 to before 1.6.1 Fixed in 1.6.1 Patch available GHSA-crp2-qrr5-8pq7
CPE configurations NVD · 5
| CPE | Versions | Role | Vendor |
|---|---|---|---|
| cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:* | before 1.4.13; 1.5.0 to before 1.5.10; 1.6.0 to before 1.6.1 | Vulnerable | backstage |
| cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* | 11.0 | Vulnerable | Debian |
| cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* | 34 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* | 35 | Vulnerable | Fedoraproject |
| cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* | 36 | Vulnerable | Fedoraproject |
- cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:* Versions before 1.4.13; 1.5.0 to before 1.5.10; 1.6.0 to before 1.6.1 Vulnerable ·backstage
- cpe:2.3:o:debian:debian_linux:11.0:*:*:*:*:*:*:* Versions 11.0 Vulnerable ·Debian
- cpe:2.3:o:fedoraproject:fedora:34:*:*:*:*:*:*:* Versions 34 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:35:*:*:*:*:*:*:* Versions 35 Vulnerable ·Fedoraproject
- cpe:2.3:o:fedoraproject:fedora:36:*:*:*:*:*:*:* Versions 36 Vulnerable ·Fedoraproject
Remediation
- Fix · CNA containerd (containerd) Fixed in 1.4.13, 1.5.10, 1.6.1
- Fix · GHSA-crp2-qrr5-8pq7 github.com/containerd/containerd (Go) Fixed in 1.4.13 Advisory →
- Fix · GHSA-crp2-qrr5-8pq7 github.com/containerd/containerd (Go) Fixed in 1.5.10 Advisory →
- Fix · GHSA-crp2-qrr5-8pq7 github.com/containerd/containerd (Go) Fixed in 1.6.1 Advisory →
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenStack Platform 16.2 | Affected | No fix yet: Fix deferred |
Not affected: 2 products
- Red Hat Advanced Cluster Management for Kubernetes 2
- Red Hat OpenShift Container Platform 4
Timeline
- 2026-10-02 Threatist record created from CVE-2022-23648
- 2026-10-03 Alias added: GHSA-crp2-qrr5-8pq7
References
Patch 4
Advisory 7
Other 7
- https://github.com/containerd/containerd
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/AUDQUQBZJGBWJPMRVB6QCCCRF7O3O4PA
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/HFTS2EF3S7HNYSNZSEJZIJHPRU7OPUV3
- https://lists.fedoraproject.org/archives/list/package-announce%40lists.fedoraproject.org/message/OCCARJ6FU4MWBTXHZNMS7NELPDBIX2VO
- https://lists.fedoraproject.org/archives/list/[email protected]/message/AUDQUQBZJGBWJPMRVB6QCCCRF7O3O4PA
- https://lists.fedoraproject.org/archives/list/[email protected]/message/HFTS2EF3S7HNYSNZSEJZIJHPRU7OPUV3
- https://lists.fedoraproject.org/archives/list/[email protected]/message/OCCARJ6FU4MWBTXHZNMS7NELPDBIX2VO
More backstage Containerd vulnerabilities
- TI-2021-19622 Improper Preservation of Permissions in containerd CVSS 3.1CRITICAL 9.1
- TI-2023-10635 containerd supplementary groups are not set up properly CVSS 3.1HIGH 7.8
- TI-2026-38567 Improper input validation in backstage containerd CVSS 4.0CRITICAL 9.4
- TI-2026-38569 containerd CRI checkpoint restore CDI annotation smuggling CVSS 4.0HIGH 8.4
- TI-2025-29820 Containerd vulnerable to host filesystem access during image unpack CVSS 4.0HIGH 7.6
- TI-2026-38568 containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore CVSS 4.0HIGH 8.2
Sources
- CVE-2022-23648 · CVE Program
- CVE-2022-23648 · NVD
- FIRST EPSS
- GHSA-crp2-qrr5-8pq7 · GitHub Advisory Database · CC BY 4.0
- CVE-2022-23648 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences