Read the docs
TI-2025-29820 Aliases CVE-2025-47290GHSA-cm76-qm8v-3j95

Containerd vulnerable to host filesystem access during image unpack

Priority LOW 36CWE-367Published · Updated

Key facts

Attack vector
Network
Privileges required
None
User interaction
Active
Attack complexity
Low
Attack requirements
None
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 4.0 · CNA. Fix status from CNA and GitHub.

Summary

containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could arbitrarily modify the host file system. The only affected version of containerd is 2.1.0. Other versions of containerd are not affected. This bug has been fixed in containerd 2.1.1. Users should update to this version to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00506 43rd percentileScored 2026-11-07
Fix Fixed github.com/containerd/containerd/v2 (Go): 2.1.1

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
backstagecontainerd= 2.1.0—No fix listedCNA
—github.com/containerd/containerd/v2 (Go)2.1.0 to before 2.1.12.1.1Patch availableGHSA-cm76-qm8v-3j95
  • containerd Vendorbackstage Affected = 2.1.0 Fixed in — No fix listed CNA
  • github.com/containerd/containerd/v2 (Go) Vendor— Affected 2.1.0 to before 2.1.1 Fixed in 2.1.1 Patch available GHSA-cm76-qm8v-3j95

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:linuxfoundation:containerd:2.1.0:*:*:*:*:*:*:*2.1.0Vulnerablebackstage
  • cpe:2.3:a:linuxfoundation:containerd:2.1.0:*:*:*:*:*:*:* Versions 2.1.0 Vulnerable ·backstage

Remediation

  • Fix · GHSA-cm76-qm8v-3j95 github.com/containerd/containerd/v2 (Go) Fixed in 2.1.1 Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

Not affected: 10 products
  • Assisted Installer for Red Hat OpenShift Container Platform 2
  • Logging Subsystem for Red Hat OpenShift
  • OpenShift API for Data Protection
  • OpenShift Developer Tools and Services
  • Red Hat Advanced Cluster Management for Kubernetes 2
  • Red Hat Advanced Cluster Security 4
  • Red Hat Enterprise Linux 8
  • Red Hat Enterprise Linux 9
  • Red Hat OpenShift Container Platform 4
  • Red Hat OpenShift Virtualization 4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-47290
  2. 2026-10-03 Alias added: GHSA-cm76-qm8v-3j95

References

Patch 1

Advisory 2

Other 2

  • TI-2021-19622 Improper Preservation of Permissions in containerd CVSS 3.1CRITICAL 9.1
  • TI-2023-10635 containerd supplementary groups are not set up properly CVSS 3.1HIGH 7.8
  • TI-2022-07700 Insecure handling of image volumes in containerd CRI plugin CVSS 3.1HIGH 7.5
  • TI-2026-38567 Improper input validation in backstage containerd CVSS 4.0CRITICAL 9.4
  • TI-2026-38569 containerd CRI checkpoint restore CDI annotation smuggling CVSS 4.0HIGH 8.4
  • TI-2026-38568 containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore CVSS 4.0HIGH 8.2
See all 21 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences