Container Image Cache Poisoning in containerd

Executive Summary

CVE-2026-50195 is a vulnerability in containerd's CRI checkpoint import process where it fails to validate image references within a checkpoint image's configuration.

An attacker with permissions to create pods can craft a malicious checkpoint image that forces containerd to pull a harmful image and assign it an arbitrary local tag, poisoning the node's local image cache.

If other pods on the same node use the poisoned tag with an IfNotPresent or Never pull policy, they will unknowingly execute the attacker's malicious image instead of the legitimate one.

This can lead to compromise of affected pods, allowing the attacker to execute arbitrary code under the victim pod's identity.

Useful 0 Not Useful 0

Impact Analysis

This vulnerability can lead to the compromise of pods running on the affected node.

An attacker can execute arbitrary code within victim pods by poisoning the local image cache with malicious images.

This can result in unauthorized actions being performed under the identity of the compromised pods, potentially leading to data breaches, service disruption, or further system compromise.

Useful 0 Not Useful 0

Mitigation Strategies

To mitigate this vulnerability, you should update containerd to one of the patched versions: 2.1.9, 2.2.5, or 2.3.2.

As a workaround until you can update, ensure that only trusted images are allowed to be pulled to prevent the use of malicious checkpoint images.

Useful 0 Not Useful 0