DEBIAN-CVE-2026-53489

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue h...

CVE-2026-53489 containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue h...

CVE-2026-53489

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue h...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: cluster-api-helm-controller-fips, neuvector, chartmuseum-fips, helm-operator, headlamp-fips, wolfictl, docker-compose, docker-cli-buildx-fips, trivy-fips, kaniko, kargo, skaffold-fips, kaniko-fips, neuvector-scanner, helm, zot, tigera-operator-fips, beats,...

Amazon Linux 2023 : containerd, containerd-stress (ALAS2023-2026-1897)

It is, therefore, affected by multiple vulnerabilities as referenced in the ALAS2023-2026-1897 advisory. Memory exhaustion DoS causing OOM kill of containerd process NOTE: https://github.com/containerd/containerd/security/advisories/GHSA-jpcc-p29g-p8mq CVE-2026-47262 Image cache poisoning via...

UBUNTU-CVE-2026-53489

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue h...

CVE-2026-53489 vulnerabilities

Vulnerabilities for packages: manifest-tool, grype, kargo, k3s, datadog-agent, ctop, trivy, steampipe, tigera-operator, rancher-agent, helm-operator, fuse-overlayfs-snapshotter, helm, syft, docker-cli-buildx, skaffold, wolfictl, consul-k8s, k9s, gatekeeper, headlamp, teleport, zot, buildkitd,...

Linux Distros Unpatched Vulnerability : CVE-2026-53489

The Linux/Unix host has one or more packages installed that are impacted by a vulnerability without a vendor supplied patch available. - containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a...

CVE-2026-53489

creationtimestamp| type| source ---|---|--- 2026-06-19 01:31:49+00:00| seen| https://bsky.app/profile/infosec.skyfleet.blue/post/3mom72udh7u25 2026-07-01 20:26:56+00:00| seen| https://bsky.app/profile/cve.skyfleet.blue/post/3mpme3nnwiy2b 2026-07-02 10:22:25+00:00| seen|...