VDB
KO

GO-2026-5378

containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd

Details

containerd user ID handling bypass allows runAsNonRoot evasion in github.com/containerd/containerd

Are you affected?

Enter the version of the package you're using.

Affected packages

Go / github.com/containerd/containerd
Introduced in: 1.7.27 Fixed in: 1.7.32
Fix go get github.com/containerd/containerd@v1.7.32
Go / github.com/containerd/containerd/v2
Introduced in: 2.0.4 Fixed in: 2.0.9
Fix go get github.com/containerd/containerd/v2@v2.0.9

References