Skip to content
OpenAdvisories

Vendor

opencontainers

11 known vulnerabilities.

opencontainers at a glance

Last 12 months
1
Critical · all time
0
Exploited · all time
0
Public exploit · all time
3
New vulnerabilities per month · last 12 months
0 1 1 December 2025: 0 vulnerabilities Dec 2025 January 2026: 0 vulnerabilities February 2026: 0 vulnerabilities March 2026: 0 vulnerabilities Mar April 2026: 0 vulnerabilities May 2026: 0 vulnerabilities June 2026: 0 vulnerabilities Jun July 2026: 1 vulnerability August 2026: 0 vulnerabilities September 2026: 0 vulnerabilities Sep October 2026: 0 vulnerabilities November 2026: 0 vulnerabilities
Show as table
MonthVulnerabilitiesCritical
Nov 202600
Oct 202600
Sep 202600
Aug 202600
Jul 202610
Jun 202600
May 202600
Apr 202600
Mar 202600
Feb 202600
Jan 202600
Dec 202500
Nov 202530
Oct 202500
Sep 202500
Aug 202500
Jul 202500
Jun 202500
May 202500
Apr 202500
Mar 202500
Feb 202500
Jan 202500
Dec 202400

Products

runc 10 distribution-spec 1
All Critical High Medium Low Exploited only Public exploit

11 results · Feed

  • Low 3.3
    CVE-2026-41579

    runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

    runc is a CLI tool for spawning and running containers according to the OCI specification. In versions prior to 1.3.6, 1.4.0-rc.1, 1.4.0-rc.12, 1.5.0-rc.1, and 1.5.0-rc.1, when setting up the container rootfs, setupPtmx and setupDevSymlinks call os.Remove and…

    opencontainers runc runc github.com/opencontainers/runc Debian Ubuntu Alpine Go
  • High 7.3
    CVE-2025-52881 Public exploit

    runc: LSM labels can be bypassed with malicious config using dummy procfs files

    runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7, 1.3.2 and 1.4.0-rc.2, an attacker can trick runc into misdirecting writes to /proc to other procfs files through the use of a racing container with s…

    opencontainers runc podman runc Debian Ubuntu Alpine Go
  • High 8.4
    CVE-2025-52565

    container escape due to /dev/console mount and related races

    runc is a CLI tool for spawning and running containers according to the OCI specification. Versions 1.0.0-rc3 through 1.2.7, 1.3.0-rc.1 through 1.3.2, and 1.4.0-rc.1 through 1.4.0-rc.2, due to insufficient checks when bind-mounting `/dev/pts/$n` to `/dev/cons…

    opencontainers runc github.com/opencontainers/runc runc Debian Ubuntu Alpine Go
  • High 7.3
    CVE-2025-31133 Public exploit

    runc container escape via "masked path" abuse due to mount race conditions

    runc is a CLI tool for spawning and running containers according to the OCI specification. In versions 1.2.7 and below, 1.3.0-rc.1 through 1.3.1, 1.4.0-rc.1 and 1.4.0-rc.2 files, runc would not perform sufficient verification that the source of the bind-mount…

    opencontainers runc runc github.com/opencontainers/runc Debian Ubuntu Alpine Go
  • Low 3.6
    CVE-2024-45310

    runc can be confused to create empty files/directories on the host

    runc is a CLI tool for spawning and running containers according to the OCI specification. runc 1.1.13 and earlier, as well as 1.2.0-rc2 and earlier, can be tricked into creating empty files or directories in arbitrary locations in the host filesystem by shar…

    opencontainers runc github.com/opencontainers/runc runc Debian Ubuntu Alpine Go
  • High 8.6
    CVE-2024-21626 Public exploit EPSS 19%

    runc container breakout through process.cwd trickery and leaked fds

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc 1.1.11 and earlier, due to an internal file descriptor leak, an attacker could cause a newly-spawned container process (from runc exec) to have a worki…

    opencontainers runc github.com/opencontainers/runc runc Debian Ubuntu Alpine Go
  • Medium 5.0
    CVE-2023-25809

    rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc

    runc is a CLI tool for spawning and running containers according to the OCI specification. In affected versions it was found that rootless runc makes `/sys/fs/cgroup` writable in following conditons: 1. when runc is executed inside the user namespace, and the…

    opencontainers runc runc github.com/opencontainers/runc Debian Ubuntu Alpine Go
  • Medium 6.1
    CVE-2023-28642

    AppArmor bypass with symlinked /proc in runc

    runc is a CLI tool for spawning and running containers according to the OCI specification. It was found that AppArmor can be bypassed when `/proc` inside the container is symlinked with a specific mount configuration. This issue has been fixed in runc version…

    opencontainers runc github.com/opencontainers/runc runc Debian Ubuntu Alpine Go
  • Medium 5.9
    CVE-2022-29162

    Incorrect Default Permissions in runc

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. A bug was found in runc prior to version 1.1.2 where `runc exec --cap` created processes with non-empty inheritable Linux process capabilities, creating an aty…

    opencontainers runc github.com/opencontainers/runc runc Debian Ubuntu Alpine Go
  • Medium 6.0
    CVE-2021-43784

    Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration

    runc is a CLI tool for spawning and running containers on Linux according to the OCI specification. In runc, netlink is used internally as a serialization system for specifying the relevant container configuration to the `C` portion of the code (responsible f…

    opencontainers runc github.com/opencontainers/runc runc Debian Ubuntu Alpine Go
  • Low 3.0
    CVE-2021-41190

    Clarify Content-Type handling in OCI spec

    The OCI Distribution Spec project defines an API protocol to facilitate and standardize the distribution of content. In the OCI Distribution Specification version 1.0.0 and prior, the Content-Type header alone was used to determine the type of document during…

    opencontainers distribution-spec docker.io docker Ubuntu Alpine Go