CVE-2026-50195 Details

A vulnerability exists in containerd versions prior to 2.3.2, 2.2.5, and 2.1.9, within the CRI checkpoint import process. The issue arises because the import process does not properly validate image references in a checkpoint image's configuration. An attacker with permission to create pods can exploit this by using a manipulated checkpoint image to trick containerd into pulling a malicious image and tagging it with a local identifier. This action corrupts the node's local image cache. If other pods on the same node later use the compromised tag with an 'IfNotPresent' or 'Never' pull policy, they will inadvertently run the attacker's malicious image instead of a legitimate one. This could lead to a breach of the affected pods, allowing the attacker to execute arbitrary code under the identity of the compromised pod.

Users should update to containerd versions 2.3.2, 2.2.5, or 2.1.9. Additionally, it is recommended to only allow trusted images to be pulled.