CVE-2026-46680— containerd 权限许可和访问控制问题漏洞

containerd user ID handling bypass allows runAsNonRoot evasion

containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an /etc/passwd file mapping this large numeric string to root, the container ultimately runs as root (UID 0). This allows the Kubernetes runAsNonRoot restriction to be bypassed, causing unexpected behavior for environments that require containers to run as a non-root user. This issue has been fixed in versions 1.7.32, 2.0.9, 2.2.4 and 2.3.1.

N/A

特权管理不恰当

containerd 权限许可和访问控制问题漏洞

containerd containerd是containerd团队的一款容器运行环境软件。 containerd存在权限许可和访问控制问题漏洞，该漏洞源于对无法解析为32位整数的数字User指令错误地视为用户名，导致runAsNonRoot绕过，如果特制镜像提供/etc/passwd文件将大数字字符串映射到root，容器最终以root权限运行，可能导致绕过Kubernetes runAsNonRoot限制。以下版本受到影响：1.7.32之前版本、2.0.9之前版本、2.2.4之前版本和2.3.1之前版本

N/A

N/A