CVE-2026-95837— containerd CRI plugin: Checkpoint restore bypasses destination security context
Quick assessment
Affected
containerd containerd
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
containerd 是一个开源的容器运行时。从版本 2.1.0 到 2.2.7 以及 2.3.4，containerd 的 CRI CreateContainer 检查点恢复功能存在漏洞，原因是 CRIU（Checkpoint/Restore In Userspace）在恢复进程安全状态时，使用的是检查点数据中的信息，而不是强制执行目标 ContainerConfig 中指定的安全配置。攻击者可以通过构造的检查点文件创建容器，从而恢复凭证、能力集（capabilities）、no_new_privs 标志以及 s
Affected Version Matrix 2
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| containerd | containerd | >= 2.1.0, < 2.2.7 |
affected |
>= 2.3.0, < 2.3.4 |
affected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-95837
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
containerd CRI plugin: Checkpoint restore bypasses destination security context
Source: CVE Program / CVE List V5
Vulnerability Description
containerd is an open-source container runtime. From 2.1.0 until 2.2.7 and 2.3.4, containerd's CRI CreateContainer checkpoint restore is vulnerable because CRIU restores process security state from checkpoint data instead of enforcing the destination ContainerConfig. An attacker who can create a container from a crafted checkpoint can supply restored credentials, capabilities, no_new_privs, and seccomp state. The restored process can run as root with full capabilities and no enforced seccomp filters while CRI status reports the requested configuration. Systems that do not use CRI checkpoint restore are not affected. This issue is fixed in versions 2.2.7 and 2.3.4.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
特权管理不恰当
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| containerd | containerd | >= 2.1.0, < 2.2.7 | - |
|
II. Public POCs for CVE-2026-95837
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-95837
请登录查看更多情报信息。
Patches & Fixes for CVE-2026-95837 (2)
Vendor Advisories for CVE-2026-95837 (1)
IV. Related Vulnerabilities
Same product: containerd
-
CVE-2026-95838
containerd: Unpack DoS via repeated opaque whiteouts -
CVE-2026-53493
Containerd has image-pull DoS via crafted OCI index graph am -
CVE-2026-53495
containerd CRI ExecSync Goroutine Leak Leading to Node-Level -
CVE-2026-53489
containerd: Arbitrary host CRI log file read via symlink fol -
CVE-2026-53492
containerd CRI checkpoint restore CDI annotation smuggling
Same vendor: containerd
-
CVE-2026-95838
containerd: Unpack DoS via repeated opaque whiteouts -
CVE-2026-107446
containerd ≤1.0.18 overlaybd整数溢出漏洞 -
CVE-2026-53493
Containerd has image-pull DoS via crafted OCI index graph am -
CVE-2026-53495
containerd CRI ExecSync Goroutine Leak Leading to Node-Level -
CVE-2026-53489
containerd: Arbitrary host CRI log file read via symlink fol
Same weakness: CWE-269
-
CVE-2026-85990
Leantime: Any Authenticated User Can Self-Escalate to Admin -
CVE-2026-109143
calcom cal.com/cal.diy Credentials delete credentials.delete -
CVE-2026-18343
IBM i is Affected By An Improper Privilege Management Vulner -
CVE-2026-109667
Frappe ERPNext before 15.111.0 Privilege Escalation via Unau -
CVE-2024-58390
Frappe before 15.41.0 Privilege Escalation via Document Acti
V. Comments for CVE-2026-95837
No comments yet