PT-2026-42700 · Unknown · Kubernetes Containerd+1

Published 2026-05-21 · Updated 2026-06-09 · CVE-2026-46680

Positive Technologies (AI Summary)

CVSS v4.0

7.3

High

Base vector

AV:L/AC:L/AT:P/PR:N/UI:P/VC:H/VI:H/VA:H/SC:N/SI:N/SA:N

Name of the Vulnerable Software and Affected Versions containerd versions prior to 2.3.1 containerd versions prior to 2.2.4 containerd versions prior to 2.0.9 containerd versions prior to 1.7.32

Description An input validation error exists where containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username. If a crafted image includes an /etc/passwd file that maps this large numeric string to root, the container runs as root (UID 0). This allows the Kubernetes runAsNonRoot restriction to be bypassed, affecting environments that require containers to run as a non-root user.

Recommendations Update to version 2.3.1. Update to version 2.2.4. Update to version 2.0.9. Update to version 1.7.32. Ensure only trusted images are used and only trusted users have permissions to import images. Enforce a specific numeric runAsUser in the Kubernetes Pod securityContext to override the USER directive in the image.

Fix

Type Confusion

Weakness Enumeration

CWE-843

Related Identifiers

CVE-2026-46680

GHSA-FQW6-GF59-QR4W

Affected Products

Kubernetes

Kubernetes Containerd

References · 8

• https://osv.dev/vulnerability/BELL-CVE-2026-46680 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-fqw6-gf59-qr4w · Vendor Advisory
• https://github.com/containerd/containerd/security/advisories/GHSA-fqw6-gf59-qr4w · Note
• https://github.com/containerd/containerd · Note
• https://docs.bell-sw.com/security/cves/CVE-2026-46680 · Note
• https://reddit.com/r/VulnMatter/comments/1tkuql2/resumen_diario_de_vulnerabilidades_22052026 · Reddit Post
• https://twitter.com/mfahlandt/status/2064271267708956770 · Twitter Post
• https://twitter.com/dailycve/status/2057641330080116909 · Twitter Post