CVE-2026-53489

containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore

CVSS 4.0 8.2 HIGHEUVD CVSS 4.0 8.2 CVSS 4.0 · [email protected] · Secondary 8.2 HIGHCVSS 3.1 · [email protected] · Primary 6.5 MEDIUMCVSS_V4 Publisher rating HIGHFixed by github.com/containerd/containerd/v2 2.1.9 Fixed by github.com/containerd/containerd/v2 2.2.5 Fixed by github.com/containerd/containerd/v2 2.3.2osv · severity unknownFixed by github.com/containerd/containerd/v2 2.1.9 Fixed by github.com/containerd/containerd/v2 2.2.5 Fixed by github.com/containerd/containerd/v2 2.3.2KEV status unknown

Original advisory

cve-program · CVE-2026-53489

Published

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.

Read the publisher's advisory

euvd · EUVD-2026-41110

Published

Read the publisher's advisory

nvd · CVE-2026-53489

Published

Read the publisher's advisory

osv · GHSA-rgh6-rfwx-v388

Published

### Impact A bug was found in containerd where the CRI plugin restores `container.log` from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via `kubectl logs`. ### Patches This bug has been fixed in the following containerd versions: * 2.3.2 * 2.2.5 * 2.1.9 Users should update to these versions to resolve the issue. ### Workarounds Ensure that only trusted images and checkpoints are used. ### Credits The containerd project would like to thank @gouldnicholas and @davidrxchester, Yuming Zhang and Song Li of Zhejiang University, Sangwon Ryu (@sangwon090), Henry Beberman (@hbeberman) of Microsoft, the GKE Security Team using Gemini, Anthropic Research, in collaboration with Claude, Robert Prast (@robertprast), Kyle Elliott (@kyle-elliott-tob) of Trail of Bits, and Zhenchen Wang (@Plucky923), who independently discovered and responsibly disclosed this issue in accordance with the [containerd security policy](https://github.com/containerd/project/blob/main/SECURITY.md). ### For more information If you have any questions or comments about this advisory: * Open an issue in [containerd](https://github.com/containerd/containerd/issues/new/choose) * Email us at [[email protected]](mailto:[email protected]) To report a security issue in containerd: * [Report a new vulnerability](https://github.com/containerd/containerd/security/advisories/new) * Email us at [[email protected]](mailto:[email protected])

Read the publisher's advisory

osv · GO-2026-5622

Published

Arbitrary host CRI log file read via symlink following in CRI checkpoint restore in github.com/containerd/containerd

Read the publisher's advisory

Affected versions, risk and source history

cve-program · CVE-2026-53489

Published

containerd

Vendor product

Publisher's version information

Shown as published. These rules are not interpreted as NuGet package version ranges.

{
                    "vendor": "containerd",
                    "product": "containerd",
                    "versions": [
                        {
                            "version": ">= 2.1.0, < 2.1.9",
                            "status": "affected"
                        },
                        {
                            "version": ">= 2.2.0, < 2.2.5",
                            "status": "affected"
                        },
                        {
                            "version": ">= 2.3.0, < 2.3.2",
                            "status": "affected"
                        }
                    ]
                }

Original source record · Cite this exact observation · Complete original publisher JSON

euvd · EUVD-2026-41110

Published

EUVD source date text has no stated timezone and is retained without inventing a UTC instant. Related bulletin membership is not an alias, common cause or applicability claim. A missing vector with a zero score is treated as unrated. Complete vendor/product and underlying source evidence remains in the original JSON.

Original publisher date fields

datePublished: Jul 1, 2026, 6:10:41 PM

dateUpdated: Jul 2, 2026, 2:34:50 PM

8 related source bulletins · separate from aliases

openSUSE-SU-2026:11102-1: trivy-0.71.2-1.1 on GA media

CVE-2026-47262 · CVE-2026-50195 · CVE-2026-53488 · CVE-2026-53489 · CVE-2026-53492

RHSA-2026:56366: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.19.22 security, enhancement & bug fix update

CVE-2025-61726 · CVE-2025-61729 · CVE-2026-6321 · CVE-2026-6322 · CVE-2026-6734 · CVE-2026-9697 · CVE-2026-12143 · CVE-2026-12151 · CVE-2026-13149 · CVE-2026-13676 · CVE-2026-25681 · CVE-2026-27136 · CVE-2026-33186 · CVE-2026-34986 · CVE-2026-42342 · CVE-2026-44740 · CVE-2026-45736 · CVE-2026-48779 · CVE-2026-53488 · CVE-2026-53489 · CVE-2026-53492 · CVE-2026-59869

WID-SEC-W-2026-2009: Google Cloud Platform (GKE containerd): Mehrere Schwachstellen

CVE-2026-47262 · CVE-2026-50195 · CVE-2026-53488 · CVE-2026-53489 · CVE-2026-53492

RHSA-2026:15862: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVE-2026-40898 · CVE-2026-44432 · CVE-2026-45287 · CVE-2026-53489 · CVE-2026-53492

openSUSE-SU-2026:21072-1: Security update for trivy

CVE-2026-44740 · CVE-2026-46680 · CVE-2026-47262 · CVE-2026-50195 · CVE-2026-53488 · CVE-2026-53489 · CVE-2026-53492

RHSA-2026:57013: Red Hat Security Advisory: Red Hat OpenShift Data Foundation 4.20.17 security, enhancement & bug fix update

CVE-2025-61726 · CVE-2026-6321 · CVE-2026-6322 · CVE-2026-6734 · CVE-2026-9697 · CVE-2026-12143 · CVE-2026-12151 · CVE-2026-13149 · CVE-2026-13676 · CVE-2026-25681 · CVE-2026-27136 · CVE-2026-33186 · CVE-2026-33747 · CVE-2026-33748 · CVE-2026-34986 · CVE-2026-44740 · CVE-2026-45736 · CVE-2026-48779 · CVE-2026-53488 · CVE-2026-53489 · CVE-2026-53492 · CVE-2026-59869

RHSA-2026:32963: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVE-2026-44740 · CVE-2026-47262 · CVE-2026-53489 · CVE-2026-53492

RHSA-2026:32974: Red Hat Security Advisory: Red Hat Hardened Images RPMs bug fix and enhancement update

CVE-2026-44740 · CVE-2026-47262 · CVE-2026-53489 · CVE-2026-53492

No normalized affected-package data is projected for this source revision. The original publisher record may contain additional product and version evidence; this does not establish that a package is unaffected.

Original source record · Cite this exact observation · Complete original publisher JSON

nvd · CVE-2026-53489

Published

NVD analysis and CPE criteria are source context, not proof that a package or your environment is affected. Complete affected data, logical configurations and SSVC are retained in the original JSON.

Source analysis status: Analyzed

Weakness classifications: CWE-61

Original publisher date fields

published: 2026-07-01T19:16:54.383

lastModified: 2026-07-02T19:33:12.850

1 source CPE criteria · context only

cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:*

The original JSON retains the logical configuration operators, exclusions and version bounds.

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GHSA-rgh6-rfwx-v388

Published

github.com/containerd/containerd/v2

SEMVER · introduced 2.1.0 → fixed 2.1.9

github.com/containerd/containerd/v2

SEMVER · introduced 2.2.0 → fixed 2.2.5

github.com/containerd/containerd/v2

SEMVER · introduced 2.3.0 → fixed 2.3.2

Original source record · Cite this exact observation · Complete original publisher JSON

osv · GO-2026-5622

Published

github.com/containerd/containerd

SEMVER · introduced 0

github.com/containerd/containerd/v2

SEMVER · introduced 2.1.0 → fixed 2.1.9 → introduced 2.2.0 → fixed 2.2.5 → introduced 2.3.0 → fixed 2.3.2

Original source record · Cite this exact observation · Complete original publisher JSON