Executive brief
containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd
Affected products
- Go github.com/containerd/containerd
- Go github.com/containerd/containerd/v2
Junglewise Threat Intelligence
CVE-2024-25621: GO-2025-4100 - containerd affected by a local privilege escalation via wide permissions on CRI directory in github.com/containerd/containerd
CVE-2024-25621 · Severity: low · CVSS 3.1 · Published 2025-11-17
Technologies: github.com/containerd/containerd (Go), github.com/containerd/containerd/v2 (Go). Vendors: Go.
Related threats
- containerd is an open-source container runtime. Prior to 1.7.35, 2.0.12, 2.2.8, and 2.3.5, containerd on Linux with the CRI plugin enabled c
- containerd CDI annotation smuggling during CRI checkpoint restore
- containerd arbitrary host file read via symlink in CRI checkpoint restore
- containerd image tag poisoning in CRI checkpoint import
- containerd Denial of Service via unbounded group parsing in images