{"description":"Trending threats, MITRE ATT\u0026CK coverage, and detection metadata. Fed continuously.","favicon":"https://feed.craftedsignal.io/favicon-32x32.png","feed_url":"https://feed.craftedsignal.io/products/containerd-2.1.0-to-2.2.7-2.3.0-to-2.3.4/feed.json","home_page_url":"https://feed.craftedsignal.io/","icon":"https://feed.craftedsignal.io/apple-touch-icon.png","items":[{"_cs_actors":[],"_cs_cpes":["cpe:2.3:a:containerd:containerd:*:*:*:*:*:*:*:*"],"_cs_cves":[{"cvss":7.8,"id":"CVE-2026-95837"}],"_cs_exploited":false,"_cs_has_poc":false,"_cs_poc_references":[],"_cs_products":["containerd (2.1.0 to \u003c2.2.7, 2.3.0 to \u003c2.3.4)"],"_cs_severities":["high"],"_cs_tags":["privilege-escalation","containerd","cve-2026-95837"],"_cs_type":"advisory","_cs_vendors":["containerd"],"content_html":"\u003cp\u003eCVE-2026-95837 describes a critical flaw in the containerd CRI plugin where container restoration from untrusted checkpoints via the CreateContainer API ignores destination security contexts. Instead of enforcing the security policies defined by the orchestrator, containerd restores sensitive process state - including Linux capabilities, UIDs/GIDs, no_new_privs, and seccomp filters - directly from the checkpoint archive. This allows an attacker to manipulate the checkpoint image to execute code with elevated privileges, effectively bypassing isolation mechanisms.\u003c/p\u003e\n\u003cp\u003eThe vulnerability is particularly dangerous because containerd's internal status reporting inaccurately reflects the requested (restricted) configuration rather than the actual (elevated) state of the restored process, misleading security monitoring systems. Affected versions include containerd v2.1.0 through v2.2.6, and v2.3.0 through v2.3.3. This feature is disabled by default in fixed versions 2.2.7 and 2.3.4, and entirely removed in 2.4.0.\u003c/p\u003e\n\u003ch2 id=\"impact\"\u003eImpact\u003c/h2\u003e\n\u003cp\u003eSuccessful exploitation allows a containerized process to escape restrictive security policies and execute as root with full Linux capabilities. This could lead to container escapes, host-level compromise, or the circumvention of organization-wide security posture. Impact is limited to environments utilizing containerd with CRI checkpoint restore enabled.\u003c/p\u003e\n\u003ch2 id=\"recommendation\"\u003eRecommendation\u003c/h2\u003e\n\u003cul\u003e\n\u003cli\u003eUpgrade containerd to version 2.2.7, 2.3.4, or 2.4.0 immediately to resolve CVE-2026-95837.\u003c/li\u003e\n\u003cli\u003eTerminate and delete any existing running containers that were restored using the CRI checkpoint restore feature to ensure no persistence of compromised states.\u003c/li\u003e\n\u003cli\u003eImplement admission controllers to scan container images and reject any images containing CRIU checkpoint data unless verified as trusted.\u003c/li\u003e\n\u003cli\u003eRestrict access to the CreateContainer API to trusted administrative users only until the patch is applied.\u003c/li\u003e\n\u003c/ul\u003e\n","date_modified":"2026-10-15T22:23:38Z","date_published":"2026-10-15T22:23:38Z","id":"https://feed.craftedsignal.io/briefs/2026-10-containerd-cri-checkpoint-bypass/","summary":"A vulnerability in the containerd CRI implementation (CVE-2026-95837) allows untrusted container checkpoints to bypass configured security contexts, enabling privilege escalation to root.","title":"Containerd CRI Checkpoint Restore Privilege Escalation","url":"https://feed.craftedsignal.io/briefs/2026-10-containerd-cri-checkpoint-bypass/"}],"language":"en","title":"CraftedSignal Threat Feed - Containerd (2.1.0 to \u003c2.2.7, 2.3.0 to \u003c2.3.4)","version":"https://jsonfeed.org/version/1.1"}