Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Tue, 29 Sep 2026 04:32:17 +0000 CVE-2026-53489 — containerd: Arbitrary host CRI log file read via symlink following in CRI checkpoint restore https://vulnerability.circl.lu/vuln/cve-2026-53489 <p><strong>Affected:</strong> containerd</p> <p>containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.</p> <p><strong>Affected:</strong> containerd</p> <p>containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.</p> https://vulnerability.circl.lu/vuln/cve-2026-53489