CVE catalog

CVE-2026-46680

containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are inc

[CVE catalog]

Severity
High · CVSS 7.8CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Published
Source
[NVD] · [CVE record]
EPSS
0.16% · Oct 25, 2026

containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an /etc/passwd file mapping this large numeric string to root, the container ultimately runs as root (UID 0). This allows the Kubernetes runAsNonRoot restriction to be bypassed, causing unexpected behavior for environments that require containers to run as a non-root user. This issue has been fixed in versions 1.7.32, 2.0.9, 2.2.4 and 2.3.1.

Vulnerable and fixed packages

Distribution-reported package versions and fixes. These do not depend on matching against the OpenFactory package catalog.

DistributionPackageReleaseVersionStatus
Debiancontainerdsid2.1.9+ds1-5fixed
Debiancontainerdforky2.1.9+ds1-5fixed
Debiancontainerdtrixie1.7.24~ds1-6+deb13u1vulnerable
Debiancontainerdtrixie-security1.7.24~ds1-6+deb13u1vulnerable
Debiancontainerdbookworm1.6.20~ds1-1+deb12u3vulnerable
Debiancontainerdbookworm-security1.6.20~ds1-1+deb12u2vulnerable
CpecontainerdNot reportedNot reportedvulnerable
CpecontainerdNot reported1.7.32fixed
CpecontainerdNot reported2.0.9fixed
CpecontainerdNot reported2.2.4fixed
CpecontainerdNot reported2.3.1fixed
Opensusetrivytumbleweed0.71.1-2.1fixed
Ubuntucontainerdpro1.7.24~ds1-8ubuntu1vulnerable
Ubuntucontainerdpro1.7.24~ds1-10ubuntu1vulnerable
Ubuntucontainerdpro1.7.24~ds1-10ubuntu1+esm1vulnerable
Ubuntucontainerd-apppro1.7.2-0ubuntu1~22.04.1vulnerable
Ubuntucontainerd-apppro1.7.12-0ubuntu2~22.04.1vulnerable
Ubuntucontainerd-apppro1.7.24-0ubuntu1~22.04.1vulnerable
Ubuntucontainerd-apppro1.7.24-0ubuntu1~22.04.2vulnerable
Ubuntucontainerd-apppro1.7.27-0ubuntu1~22.04.1vulnerable
Ubuntucontainerd-apppro1.7.28-0ubuntu1~22.04.1vulnerable
Ubuntucontainerd-apppro1.7.28-0ubuntu1~22.04.1+esm1vulnerable
Ubuntucontainerd-apppro2.2.1-0ubuntu1~22.04.1vulnerable
Ubuntucontainerd-apppro2.2.1-0ubuntu1~22.04.2vulnerable
Ubuntucontainerd22.041.5.5-0ubuntu3vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu1vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu2vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu3vulnerable
Ubuntucontainerd22.041.5.9-0ubuntu3.1vulnerable
Ubuntucontainerd22.041.6.12-0ubuntu1~22.04.1vulnerable
Ubuntucontainerd22.041.6.12-0ubuntu1~22.04.3vulnerable
Ubuntucontainerd22.041.6.12-0ubuntu1~22.04.5vulnerable
Ubuntucontainerd22.041.6.12-0ubuntu1~22.04.6vulnerable
Ubuntucontainerd22.041.6.12-0ubuntu1~22.04.7vulnerable
Ubuntucontainerd22.041.6.12-0ubuntu1~22.04.8vulnerable
Ubuntucontainerd22.041.6.12-0ubuntu1~22.04.9vulnerable
Ubuntucontainerd22.041.6.12-0ubuntu1~22.04.10vulnerable
Ubuntucontainerd22.041.6.12-0ubuntu1~22.04.11vulnerable
Ubuntucontainerd-app24.041.7.2-0ubuntu2vulnerable
Ubuntucontainerd-app24.041.7.12-0ubuntu1vulnerable
Ubuntucontainerd-app24.041.7.12-0ubuntu2vulnerable
Ubuntucontainerd-app24.041.7.12-0ubuntu3vulnerable
Ubuntucontainerd-app24.041.7.12-0ubuntu4vulnerable
Ubuntucontainerd-app24.041.7.12-0ubuntu4.1vulnerable
Ubuntucontainerd-app24.041.7.19-0ubuntu1~24.04.1vulnerable
Ubuntucontainerd-app24.041.7.19+really1.7.12-0ubuntu4.2vulnerable
Ubuntucontainerd-app24.041.7.24-0ubuntu1~24.04.1vulnerable
Ubuntucontainerd-app24.041.7.24-0ubuntu1~24.04.2vulnerable
Ubuntucontainerd-app24.041.7.27-0ubuntu1~24.04.1vulnerable
Ubuntucontainerd-app24.041.7.28-0ubuntu1~24.04.1vulnerable
Ubuntucontainerd-app24.041.7.28-0ubuntu1~24.04.2vulnerable
Ubuntucontainerd-app24.042.2.1-0ubuntu1~24.04.2vulnerable
Ubuntucontainerd-app24.042.2.1-0ubuntu1~24.04.3vulnerable
Ubuntucontainerd-app24.042.2.1-0ubuntu1~24.04.4vulnerable
Ubuntucontainerd25.101.7.24~ds1-5ubuntu1vulnerable
Ubuntucontainerd25.101.7.24~ds1-6ubuntu1vulnerable
Ubuntucontainerd25.101.7.24~ds1-8ubuntu1vulnerable
Ubuntucontainerd25.101.7.24~ds1-8ubuntu1.1vulnerable
Ubuntucontainerd-app25.102.0.2-0ubuntu2vulnerable
Ubuntucontainerd-app25.102.0.5-0ubuntu1vulnerable
Ubuntucontainerd-app25.102.1.3-0ubuntu2vulnerable
Ubuntucontainerd-app25.102.1.3-0ubuntu3vulnerable
Ubuntucontainerd-app25.102.1.3-0ubuntu3.1vulnerable
Ubuntucontainerd-app25.102.2.1-0ubuntu1~25.10.1vulnerable
Ubuntucontainerd-app25.102.2.1-0ubuntu1~25.10.2vulnerable
Ubuntucontainerd-stable25.102.1.3-0ubuntu1vulnerable
Ubuntucontainerd-stable25.102.1.6-0ubuntu1~25.10.1vulnerable
Ubuntucontainerd-stable25.102.1.6-0ubuntu1~25.10.2vulnerable
Ubuntucontainerd26.101.7.24~ds1-10ubuntu1vulnerable
Ubuntucontainerd26.102.1.9+ds1-2ubuntu1vulnerable
Ubuntucontainerd26.102.1.9+ds1-3ubuntu1vulnerable
Ubuntucontainerd26.102.1.9+ds1-5ubuntu1vulnerable
Ubuntucontainerd-app26.102.2.2-0ubuntu1vulnerable
Ubuntucontainerd-app26.102.2.2-0ubuntu2vulnerable
Ubuntucontainerd-app26.102.3.4+dfsg1-0ubuntu2vulnerable
Ubuntucontainerd-stable26.102.2.2-0ubuntu1vulnerable
Ubuntucontainerd-stable26.102.2.2-0ubuntu2vulnerable
Ubuntucontainerd-stable26.102.3.4+dfsg1-0ubuntu2vulnerable
Ubuntucontainerd-app26.042.1.3-0ubuntu3vulnerable
Ubuntucontainerd-app26.042.2.1-0ubuntu1vulnerable
Ubuntucontainerd-app26.042.2.2-0ubuntu1vulnerable
Ubuntucontainerd-app26.042.2.2-0ubuntu1.1vulnerable
Ubuntucontainerd-app26.042.2.2-0ubuntu1.2vulnerable
Ubuntucontainerd-stable26.042.1.3-0ubuntu1vulnerable
Ubuntucontainerd-stable26.042.1.5-0ubuntu1vulnerable
Ubuntucontainerd-stable26.042.2.1-0ubuntu1vulnerable
Ubuntucontainerd-stable26.042.2.2-0ubuntu1vulnerable
Ubuntucontainerd-stable26.042.2.2-0ubuntu1.1vulnerable

Fixed-version evidence

DistributionPackageTypeReleaseFixed versionUrgencyOriginBugs
Debiancontainerdsourcesid2.1.9+ds1-1not yet assignedNot reported[1141499]
Debiancontainerdsourceforky2.1.9+ds1-1not yet assignedNot reported[1141499]
Debiancontainerdsourcetrixie(unfixed)not yet assignedNot reported[1141499]
Debiancontainerdsourcebookworm(unfixed)not yet assignedNot reported[1141499]
CpecontainerdcpeNot reported1.7.32Not reportedNot reportedNot reported
CpecontainerdcpeNot reported2.0.9Not reportedNot reportedNot reported
CpecontainerdcpeNot reported2.2.4Not reportedNot reportedNot reported
CpecontainerdcpeNot reported2.3.1Not reportedNot reportedNot reported
Opensusetrivyrpmtumbleweed0.71.1-2.1Not reportedOPENSUSE-SU-2026:11048-1Not reported

[Debian bug #1141499]

OpenFactory catalog packages

[Debian 12 (Bookworm)]

  • [containerd]Affected
    Details (4)

    • 1.6.20~ds1-1+deb12u3 · amd64 · bookworm

      Affected

      nvd · containerd · debian · bookworm; nvd · containerd · debian · 12

    • 1.6.20~ds1-1+deb12u3 · arm64 · bookworm

      Affected

      nvd · containerd · debian · bookworm; nvd · containerd · debian · 12

    • 1.6.20~ds1-1+deb12u2 · amd64 · bookworm-security

      Affected

      nvd · containerd · debian · bookworm; nvd · containerd · debian · 12

    • 1.6.20~ds1-1+deb12u2 · arm64 · bookworm-security

      Affected

      nvd · containerd · debian · bookworm; nvd · containerd · debian · 12

  • [golang-github-containerd-containerd-dev]Affected

    Source package: [containerd]

    Details (4)

    • 1.6.20~ds1-1+deb12u3 · all · bookworm

      Affected

      nvd · containerd · debian · bookworm; nvd · containerd · debian · 12

    • 1.6.20~ds1-1+deb12u3 · all · bookworm

      Affected

      nvd · containerd · debian · bookworm; nvd · containerd · debian · 12

    • 1.6.20~ds1-1+deb12u2 · all · bookworm-security

      Affected

      nvd · containerd · debian · bookworm; nvd · containerd · debian · 12

    • 1.6.20~ds1-1+deb12u2 · all · bookworm-security

      Affected

      nvd · containerd · debian · bookworm; nvd · containerd · debian · 12

[Debian 13 (Trixie)]

  • [containerd]Affected
    Details (4)

    • 1.7.24~ds1-6+deb13u1 · amd64 · trixie

      Affected

      nvd · containerd · debian · 13

    • 1.7.24~ds1-6+deb13u1 · arm64 · trixie

      Affected

      nvd · containerd · debian · 13

    • 1.7.24~ds1-6+deb13u1 · amd64 · trixie-security

      Affected

      nvd · containerd · debian · 13

    • 1.7.24~ds1-6+deb13u1 · arm64 · trixie-security

      Affected

      nvd · containerd · debian · 13

  • [golang-github-containerd-containerd-dev]Affected

    Source package: [containerd]

    Details (4)

    • 1.7.24~ds1-6+deb13u1 · all · trixie

      Affected

      nvd · containerd · debian · 13

    • 1.7.24~ds1-6+deb13u1 · all · trixie

      Affected

      nvd · containerd · debian · 13

    • 1.7.24~ds1-6+deb13u1 · all · trixie-security

      Affected

      nvd · containerd · debian · 13

    • 1.7.24~ds1-6+deb13u1 · all · trixie-security

      Affected

      nvd · containerd · debian · 13

[openSUSE Tumbleweed]

  • [trivy]Fixed

    Source package: [trivy]

    Details (1)

    • 0.74.0-1.1 · x86_64 · tumbleweed

      Fixed · Fixed: 0.71.1-2.1

      nvd · trivy · opensuse · tumbleweed

Observed:

References

[Debian Security Tracker] · [FIRST EPSS] · [National Vulnerability Database (NVD)] · [OSV Package Vulnerability Database] · [Red Hat security advisories and VEX] · [SUSE security advisories and VEX]