Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
7.8
CVE-2026-53492: containerd v2 bug could let attackers gain full control
CVE-2026-53492 · published 5 days ago
Summary
The containerd version 2 software used in several Linux container packages has a flaw that could allow a malicious user to obtain complete system privileges. The issue has been fixed by the project’s maintainers. Upgrade to the newest released version of containerd immediately to stay protected.
What to do
- Update canonical containerd-app to version 2.2.2-0ubuntu1.1.
- Update canonical containerd-stable to version 2.2.2-0ubuntu1.1.
- Update github.com containerd to version 2.1.9.
- Update github.com containerd to version 2.2.5.
- Update github.com containerd to version 2.3.2.
- Update containerd github.com/containerd/containerd/v2 to version 2.1.9.
- Update containerd github.com/containerd/containerd/v2 to version 2.2.5.
- Update containerd github.com/containerd/containerd/v2 to version 2.3.2.
- Update debian containerd to version 2.1.9+ds1-1.
- Update containerd rootio-github.com/containerd/containerd/v2 to version v2.2.4-root.io.1.
- Update containerd github.com/containerd/containerd/v2 to version v2.2.4-aikido.1.
- Update canonical containerd-app to version 2.2.1-0ubuntu1~22.04.2.
- Update canonical containerd-app to version 2.2.1-0ubuntu1~24.04.3.
- Update canonical containerd-app to version 2.2.1-0ubuntu1~25.10.2.
- Update canonical containerd-stable to version 2.1.6-0ubuntu1~25.10.2.
- Update bellsoft containerd to version 2.2.8-r0.
- Update bellsoft containerd to version 2.3.2-r0.
- Update containerd github.com/containerd/containerd to version v1.7.33-aikido.1.
- Update containerd rootio-github.com/containerd/containerd to version v1.7.33-root.io.1.
- Update containerd github.com/containerd/containerd to version v1.7.33-aikido.2.
- Update containerd rootio-github.com/containerd/containerd to version v1.7.33-root.io.2.
Affected software
| Ecosystem | Vendor | Product | Affected versions |
|---|---|---|---|
| Ubuntu:26.04:LTS | canonical | containerd-app |
< 2.2.2-0ubuntu1.1 Fix: upgrade to 2.2.2-0ubuntu1.1
|
| Ubuntu:26.04:LTS | canonical | containerd-stable |
< 2.2.2-0ubuntu1.1 Fix: upgrade to 2.2.2-0ubuntu1.1
|
| – | linuxfoundation | containerd |
>= 2.1.0, < 2.1.9 >= 2.2.0, < 2.2.5 >= 2.3.0, < 2.3.2 cpe:2.3:a:linuxfoundation:containerd:*:*:*:*:*:*:*:* |
| go | github.com | containerd |
>= 2.1.0, < 2.1.9 >= 2.2.0, < 2.2.5 >= 2.3.0, < 2.3.2 Fix: upgrade to 2.1.9
|
| Go | containerd | github.com/containerd/containerd/v2 |
>= 2.1.0, < 2.1.9 >= 2.2.0, < 2.2.5 >= 2.3.0, < 2.3.2 Fix: upgrade to 2.1.9
|
| Debian:14 | debian | containerd |
< 2.1.9+ds1-1 Fix: upgrade to 2.1.9+ds1-1
|
| Ubuntu:Pro:16.04:LTS | canonical | containerd | All versions |
| Ubuntu:Pro:18.04:LTS | canonical | containerd | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | containerd | All versions |
| Ubuntu:Pro:20.04:LTS | canonical | containerd-app | All versions |
| Ubuntu:22.04:LTS | canonical | containerd | All versions |
| Ubuntu:22.04:LTS | canonical | containerd-app |
< 2.2.1-0ubuntu1~22.04.2 Fix: upgrade to 2.2.1-0ubuntu1~22.04.2
|
| Ubuntu:24.04:LTS | canonical | containerd-app |
< 2.2.1-0ubuntu1~24.04.3 Fix: upgrade to 2.2.1-0ubuntu1~24.04.3
|
| Ubuntu:Pro:24.04:LTS | canonical | containerd | All versions |
| Ubuntu:25.10 | canonical | containerd | All versions |
| Ubuntu:25.10 | canonical | containerd-app |
< 2.2.1-0ubuntu1~25.10.2 Fix: upgrade to 2.2.1-0ubuntu1~25.10.2
|
| Ubuntu:25.10 | canonical | containerd-stable |
< 2.1.6-0ubuntu1~25.10.2 Fix: upgrade to 2.1.6-0ubuntu1~25.10.2
|
| Ubuntu:26.04:LTS | canonical | containerd | All versions |
| Go | containerd | github.com/containerd/containerd | All versions |
| Root:Go | containerd | rootio-github.com/containerd/containerd/v2 |
< v2.2.4-root.io.1 Fix: upgrade to v2.2.4-root.io.1
|
| Root:Go | containerd | github.com/containerd/containerd/v2 |
< v2.2.4-aikido.1 Fix: upgrade to v2.2.4-aikido.1
|
| Alpaquita:25 | bellsoft | containerd |
>= 2.1.1-r0, < 2.2.8-r0 Fix: upgrade to 2.2.8-r0
|
| Alpaquita:stream | bellsoft | containerd |
>= 1.7.2-r1, < 2.3.2-r0 Fix: upgrade to 2.3.2-r0
|
| Root:Go | containerd | github.com/containerd/containerd |
< v1.7.33-aikido.1 < v1.7.33-aikido.2 Fix: upgrade to v1.7.33-aikido.1
|
| Root:Go | containerd | rootio-github.com/containerd/containerd |
< v1.7.33-root.io.1 < v1.7.33-root.io.2 Fix: upgrade to v1.7.33-root.io.1
|
Original advisory text
CVE-2026-53492 in github.com/containerd/containerd/v2 - Patched by Root
Root has patched CVE-2026-53492 in the github.com/containerd/containerd/v2 package for Root:Go. Multiple fixed versions available.
References
- https://github.com/advisories/GHSA-33vj-92qq-66hc
- https://github.com/containerd/containerd Product
- https://github.com/containerd/containerd/security/advisories/GHSA-33vj-92qq-66hc Vendor Advisory
- https://security-tracker.debian.org/tracker/CVE-2026-53492 Vendor Advisory
- https://www.cve.org/CVERecord?id=CVE-2026-53492 Third Party Advisory
- https://ubuntu.com/security/CVE-2026-53492 Third Party Advisory
- https://ubuntu.com/security/notices/USN-8472-1 Vendor Advisory
- https://ubuntu.com/security/notices/USN-8473-1 Vendor Advisory
- https://docs.bell-sw.com/security/cves/CVE-2026-53492 Vendor Advisory
- https://github.com/CVEProject/cvelistV5/tree/main/cves/2026/53xxx/CVE-2026-53492... Vendor Advisory
- https://nvd.nist.gov/vuln/detail/CVE-2026-53492 Vendor Advisory
Internet-facing
60 days
Internal
At next upgrade
- Not known to be exploited
- Needs hands-on effort to exploit
- Gives an attacker partial control
Severity
7.8
High
Type
CWE-20Improper Input Validation
CWE-863Incorrect Authorization
Timeline
Published30 Oct 2026
Updated4 Nov 2026
First seen19 Jun 2026
Sources
DEBIAN-CVE-2026-53492 · OSV
UBUNTU-CVE-2026-53492 · OSV
GHSA-33vj-92qq-66hc · GHSA
CVE-2026-53492 · NVD
GHSA-33vj-92qq-66hc · OSV
GO-2026-5064 · OSV
BELL-CVE-2026-53492 · OSV
CVE-2026-53492 · OSV
Track software like this
Free during beta