[CVE-2026-53489] containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a b…

Descripción técnica

containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.

Producto afectado

Check Point Security — Check Point Software Technologies

Puntuación CVSS

Score: 6.5/10 — Severidad: MEDIUM

CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N

Debilidades (CWE)

CWE-61

Fuente oficial

CVE publicado en NIST NVD y verificado como afectando productos Check Point.