containerd user ID handling bypass allows runAsNonRoot evasion

🗓️ 21 May 2026 21:40:36Reported by GitHub Advisory DatabaseType

Containerd bug treats large numeric User as a username, bypassing runAsNonRoot; update to fixed versions.

Reporter	Title	Published	Views	Family All 367
IBM Security Bulletins	Security Bulletin: Multiple security vulnerabilities in Go affects IBM Robotic Process Automation for Cloud Pak	9 Jun 202519:01	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple vulnerabilities in IBM MQ Operator and Queue manager container images	16 Oct 202513:15	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Watson Speech Services Cartridge is vulnerable to an interger overflow in containerd [CVE-2024-40635]	1 May 202520:35	–	ibm
IBM Security Bulletins	Security Bulletin: Multiple Vulnerabilities in IBM Concert Software.	18 Aug 202504:29	–	ibm
IBM Security Bulletins	Security Bulletin: Containerd can cause an overflow condition where the container ultimately runs as root, which affects IBM watsonx.data	25 Jul 202512:33	–	ibm
IBM Security Bulletins	Security Bulletin: IBM Cloud Kubernetes Service is affected by a containerd security vulnerability (CVE-2024-40635)	28 Apr 202520:41	–	ibm
GithubExploit	Exploit for CVE-2024-40635	30 Apr 202516:22	–	githubexploit
GithubExploit	Exploit for CVE-2026-46680	21 May 202609:13	–	githubexploit
Tenable Nessus	Amazon Linux 2023 : ecs-init (ALAS2023-2025-1015)	12 Jun 202500:00	–	nessus
Tenable Nessus	Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2025-920)	1 Apr 202500:00	–	nessus

Vulners

Node

containerd containerdRange2.3.0-beta.0–2.3.1go

containerd containerdRange2.1.0-beta.0–2.2.4go

containerd containerdRange2.0.4–2.0.9go

containerd containerdRange1.7.27–1.7.32go

Source	Link
github	www.github.com/containerd/containerd/security/advisories/GHSA-fqw6-gf59-qr4w
github	www.github.com/advisories/GHSA-fqw6-gf59-qr4w

21 May 2026 21:40Current

5.7Medium risk

Vulners AI Score5.7

CVSS 3.14.6 - 7.8

EPSS0.00062

SSVC