--- id: CVE-2026-53488 title: >- github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin (CVE-2026-53488) summary: >- A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversi… severity: high cvss: 8.8 cvssVector: 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H' cvssSource: vendor cwe: - CWE-78 - CWE-74 vendor: Red Hat product: Red Hat Openshift Data Foundation 4.20 affected: - assisted_installer_for_red_hat_openshift_container_platform 2 - confidential_compute_attestation - deployment_validation_operator - kernel_module_management_operator_for_red_hat_openshift - machine_deletion_remediation_operator - mcp_server_for_red_hat_openshift - migration_toolkit_for_virtualization - multicluster_engine_for_kubernetes - node_healthcheck_operator - openshift_developer_tools_and_services - openshift_lightspeed - openshift_pipelines - openshift_serverless - power_monitoring_for_red_hat_openshift - advanced_cluster_security 4 - ansible_automation_platform 2 - ceph_storage 6 - ceph_storage 9 - openshift_ai_rhoai - openshift_container_platform 4 - openshift_for_windows_containers - openshift_gitops - openshift_virtualization 4 - multicluster_global_hub 1.4.5 - multicluster_global_hub 1.6.5 - multicluster_global_hub 1.7.0 - openshift_api_for_data_protection 1.3 - openshift_api_for_data_protection 1.4 - openshift_api_for_data_protection 1.5 - advanced_cluster_management_for_kubernetes 2.11 - advanced_cluster_management_for_kubernetes 2.13 - advanced_cluster_management_for_kubernetes 2.14 - advanced_cluster_management_for_kubernetes 2.15 - advanced_cluster_management_for_kubernetes 2.16 - advanced_cluster_management_for_kubernetes 2.17 - advanced_cluster_security 4.9 - advanced_cluster_security_for_kubernetes 4.10 - advanced_cluster_security_for_kubernetes 4.11 - hardened_images - openshift_container_platform 4.22 patched: - multicluster_global_hub 1.4.5 - multicluster_global_hub 1.6.5 - multicluster_global_hub 1.7.0 - openshift_api_for_data_protection 1.3 - openshift_api_for_data_protection 1.4 - openshift_api_for_data_protection 1.5 - advanced_cluster_management_for_kubernetes 2.11 - advanced_cluster_management_for_kubernetes 2.13 - advanced_cluster_management_for_kubernetes 2.14 - advanced_cluster_management_for_kubernetes 2.15 - advanced_cluster_management_for_kubernetes 2.16 - advanced_cluster_management_for_kubernetes 2.17 - advanced_cluster_security 4.9 - advanced_cluster_security_for_kubernetes 4.10 - advanced_cluster_security_for_kubernetes 4.11 - hardened_images - openshift_container_platform 4.22 - openshift_dev_spaces 3.30 - openshift_data_foundation 4.19 - openshift_data_foundation 4.20 - trusted_artifact_signer 1.4 - multicluster_global_hub 1.5.3 - multicluster_engine_for_kubernetes 2.1 - multicluster_engine_for_kubernetes 2.6 published: '2026-07-01' updated: '2026-09-18' sourceUpdated: '2026-09-18T03:00:00+00:00' source: CSAF sourceUrl: 'https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53488.json' references: - url: >- https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53488.json - url: 'https://access.redhat.com/security/cve/CVE-2026-53488' - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2495815' - url: 'https://www.cve.org/CVERecord?id=CVE-2026-53488' - url: 'https://nvd.nist.gov/vuln/detail/CVE-2026-53488' - url: >- https://github.com/containerd/containerd/security/advisories/GHSA-xhf5-7wjv-pqxp - url: 'https://access.redhat.com/errata/RHSA-2026:41030' - url: 'https://access.redhat.com/errata/RHSA-2026:44622' - url: 'https://access.redhat.com/errata/RHSA-2026:47149' - url: 'https://access.redhat.com/errata/RHSA-2026:53530' - url: 'https://access.redhat.com/errata/RHSA-2026:51033' - url: 'https://access.redhat.com/errata/RHSA-2026:59467' - url: 'https://access.redhat.com/errata/RHSA-2026:66022' - url: 'https://access.redhat.com/errata/RHSA-2026:60387' - url: 'https://access.redhat.com/errata/RHSA-2026:47737' - url: 'https://access.redhat.com/errata/RHSA-2026:36873' - url: 'https://access.redhat.com/errata/RHSA-2026:60388' - url: 'https://access.redhat.com/errata/RHSA-2026:46903' - url: 'https://access.redhat.com/errata/RHSA-2026:57191' - url: 'https://access.redhat.com/errata/RHSA-2026:60386' - url: 'https://access.redhat.com/errata/RHSA-2026:36319' - url: 'https://access.redhat.com/errata/RHSA-2026:48872' - url: 'https://access.redhat.com/errata/RHSA-2026:36625' - url: 'https://access.redhat.com/errata/RHSA-2026:36207' - url: 'https://access.redhat.com/errata/RHSA-2026:35111' - url: 'https://access.redhat.com/errata/RHSA-2026:63096' - url: 'https://access.redhat.com/errata/RHSA-2026:62260' - url: 'https://access.redhat.com/errata/RHSA-2026:56366' - url: 'https://access.redhat.com/errata/RHSA-2026:57013' - url: 'https://access.redhat.com/errata/RHSA-2026:51084' - url: 'https://access.redhat.com/errata/RHSA-2026:42852' - url: 'https://access.redhat.com/errata/RHSA-2026:37252' - url: 'https://github.com/advisories/GHSA-xhf5-7wjv-pqxp' tags: - csaf - vex - red-hat - ghsa - go epss: 0.00163 epssPercentile: 0.04871 ecosystem: go ingestedAt: '2026-06-22T15:52:21.050Z' --- ## Overview A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin, which manages container operations, fails to validate labels propagated from an image configuration to a container. This oversight could enable an attacker to execute arbitrary commands on the host system through a plugin that processes these unvalidated labels. The primary impact is host-root command execution, allowing unauthorized control over the underlying system. ## Vendor advisories - **RHSA-2026:41030** · Red Hat · fixed in: Multicluster Global Hub 1.4.5 · released 2026-07-16 · [advisory](https://access.redhat.com/errata/RHSA-2026:41030) - **RHSA-2026:44622** · Red Hat · fixed in: Multicluster Global Hub 1.6.5 · released 2026-07-23 · [advisory](https://access.redhat.com/errata/RHSA-2026:44622) - **RHSA-2026:47149** · Red Hat · fixed in: Multicluster Global Hub 1.7.0 · released 2026-07-28 · [advisory](https://access.redhat.com/errata/RHSA-2026:47149) - **RHSA-2026:53530** · Red Hat · fixed in: Multicluster Global Hub 1.7.0 · released 2026-08-11 · [advisory](https://access.redhat.com/errata/RHSA-2026:53530) - **RHSA-2026:51033** · Red Hat · fixed in: OpenShift API for Data Protection 1.3 · released 2026-08-06 · [advisory](https://access.redhat.com/errata/RHSA-2026:51033) - **RHSA-2026:59467** · Red Hat · fixed in: OpenShift API for Data Protection 1.4 · released 2026-08-25 · [advisory](https://access.redhat.com/errata/RHSA-2026:59467) - **RHSA-2026:66022** · Red Hat · fixed in: OpenShift API for Data Protection 1.5 · released 2026-09-09 · [advisory](https://access.redhat.com/errata/RHSA-2026:66022) - **RHSA-2026:60387** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.11 · released 2026-08-26 · [advisory](https://access.redhat.com/errata/RHSA-2026:60387) - **RHSA-2026:47737** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.13 · released 2026-07-29 · [advisory](https://access.redhat.com/errata/RHSA-2026:47737) - **RHSA-2026:36873** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.13 · released 2026-07-08 · [advisory](https://access.redhat.com/errata/RHSA-2026:36873) - **RHSA-2026:60388** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.14 · released 2026-08-26 · [advisory](https://access.redhat.com/errata/RHSA-2026:60388) - **Red Hat VEX** · Important · affected: Assisted Installer for Red Hat OpenShift Container Platform 2, Confidential Compute Attestation, Deployment Validation Operator, Kernel Module Management Operator for Red Hat Openshift, Machine Deletion Remediation Operator, MCP Server for Red Hat OpenShift, … · no fix planned: OpenShift Developer Tools and Services, Confidential Compute Attestation, MCP Server for Red Hat OpenShift, Migration Toolkit for Virtualization, … · updated 2026-09-18 · [vex](https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-53488.json) - **RHSA-2026:46903** · Red Hat · fixed in: Red Hat Advanced Cluster Management for Kubernetes 2.15 · released 2026-07-27 · [advisory](https://access.redhat.com/errata/RHSA-2026:46903) **github.com/containerd/containerd: containerd: Host-root command execution via unvalidated image config labels in CRI plugin** — rated Important by Red Hat. Released 2026-07-01, updated 2026-09-18. Affected: - Assisted Installer for Red Hat OpenShift Container Platform 2 - Confidential Compute Attestation - Deployment Validation Operator - Kernel Module Management Operator for Red Hat Openshift - Machine Deletion Remediation Operator - MCP Server for Red Hat OpenShift - Migration Toolkit for Virtualization - Multicluster Engine for Kubernetes - Node HealthCheck Operator - OpenShift Developer Tools and Services - OpenShift Lightspeed - OpenShift Pipelines - OpenShift Serverless - Power monitoring for Red Hat OpenShift - Red Hat Advanced Cluster Security 4 - Red Hat Ansible Automation Platform 2 - Red Hat Ceph Storage 6 - Red Hat Ceph Storage 9 - Red Hat OpenShift AI (RHOAI) - Red Hat OpenShift Container Platform 4 - Red Hat OpenShift for Windows Containers - Red Hat OpenShift GitOps - Red Hat OpenShift Virtualization 4 Fixed: - Multicluster Global Hub 1.4.5 - Multicluster Global Hub 1.6.5 - Multicluster Global Hub 1.7.0 - OpenShift API for Data Protection 1.3 - OpenShift API for Data Protection 1.4 - OpenShift API for Data Protection 1.5 - Red Hat Advanced Cluster Management for Kubernetes 2.11 - Red Hat Advanced Cluster Management for Kubernetes 2.13 - Red Hat Advanced Cluster Management for Kubernetes 2.14 - Red Hat Advanced Cluster Management for Kubernetes 2.15 - Red Hat Advanced Cluster Management for Kubernetes 2.16 - Red Hat Advanced Cluster Management for Kubernetes 2.17 - Red Hat Advanced Cluster Security 4.9 - Red Hat Advanced Cluster Security for Kubernetes 4.10 - Red Hat Advanced Cluster Security for Kubernetes 4.11 - Red Hat Hardened Images - Red Hat OpenShift Container Platform 4.22 - Red Hat OpenShift Dev Spaces 3.30 - Red Hat Openshift Data Foundation 4.19 - Red Hat Openshift Data Foundation 4.20 - Red Hat Trusted Artifact Signer 1.4 - Red Hat multicluster global hub 1.5.3 - multicluster engine for Kubernetes 2.1 - multicluster engine for Kubernetes 2.6 No fix planned: - OpenShift Developer Tools and Services - Confidential Compute Attestation - MCP Server for Red Hat OpenShift - Migration Toolkit for Virtualization - Red Hat Ansible Automation Platform 2 - Red Hat OpenShift AI (RHOAI) - Red Hat OpenShift Container Platform 4 - Red Hat OpenShift GitOps - Red Hat OpenShift Virtualization 4 - Red Hat Ceph Storage 6 - Red Hat Ceph Storage 9 - Assisted Installer for Red Hat OpenShift Container Platform 2 - Deployment Validation Operator - Kernel Module Management Operator for Red Hat Openshift - Machine Deletion Remediation Operator - Multicluster Engine for Kubernetes - Node HealthCheck Operator - OpenShift Lightspeed - OpenShift Pipelines - OpenShift Serverless - Power monitoring for Red Hat OpenShift - Red Hat Advanced Cluster Security 4 - Red Hat OpenShift for Windows Containers Not affected: - Multicluster Global Hub 1.4.5 - Multicluster Global Hub 1.6.5 - Multicluster Global Hub 1.7.0 - OpenShift API for Data Protection 1.3 - OpenShift API for Data Protection 1.4 - OpenShift API for Data Protection 1.5 - Red Hat Advanced Cluster Management for Kubernetes 2.11 - Red Hat Advanced Cluster Management for Kubernetes 2.13 - Red Hat Advanced Cluster Management for Kubernetes 2.14 - Red Hat Advanced Cluster Management for Kubernetes 2.15 ## Remediation For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation: https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.13/html/multicluster_global_hub/index https://access.redhat.com/errata/RHSA-2026:41030 For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation: https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.15/html/multicluster_global_hub/index https://access.redhat.com/errata/RHSA-2026:44622 For more details, see the Red Hat Advanced Cluster Management for Kubernetes documentation: https://docs.redhat.com/documentation/en-us/red_hat_advanced_cluster_management_for_kubernetes/2.16/html/multicluster_global_hub/index https://access.redhat.com/errata/RHSA-2026:47149 Workarounds / mitigations: - Restrict container image pulls to trusted registries using admission policies or image signature verification. Where containerd is used as the container runtime, disable or restrict the binary:// logger URI scheme in the containerd configuration to prevent the label-to-logger attack path. ## Package advisory (CVE-2026-53488) Affected packages: - `github.com/containerd/containerd >= 1.7.0, < 1.7.33` - `github.com/containerd/containerd/v2 >= 2.0.0, < 2.0.10` - `github.com/containerd/containerd/v2 >= 2.1.0, < 2.1.9` - `github.com/containerd/containerd/v2 >= 2.2.0, < 2.2.5` - `github.com/containerd/containerd/v2 >= 2.3.0, < 2.3.2` Patched in: - `github.com/containerd/containerd 1.7.33` - `github.com/containerd/containerd/v2 2.0.10` - `github.com/containerd/containerd/v2 2.1.9` - `github.com/containerd/containerd/v2 2.2.5` - `github.com/containerd/containerd/v2 2.3.2` Source: https://github.com/advisories/GHSA-xhf5-7wjv-pqxp