# github.com/opencontainers/runc (Go) vulnerabilities Source: https://junglewise.ai/threats/technologies/github-com-opencontainers-runc Publisher: Junglewise Threat Intelligence, https://junglewise.ai/threats Updated: 13 November 2026, 03:07 UTC. Rebuilt every hour. Data: https://junglewise.ai/threats/technologies/github-com-opencontainers-runc.json License: CC BY 4.0 with a link back Junglewise Threat Intelligence has tracked 20 vulnerabilities in github.com/opencontainers/runc (Go): 0 in the last 7 days and 0 in the last 90 days, 0 of them critical and 0 exploited in the wild. The most recent, CVE-2026-41579, was published on 1 July 2026. ## Counts - Last 7 days: 0 - Last 30 days: 0 - Last 90 days: 0 - All time: 20 (0 critical, 0 exploited in the wild) ## About github.com/opencontainers/runc (Go) A CLI tool for spawning and running containers according to the OCI specification. ## Latest github.com/opencontainers/runc (Go) vulnerabilities - [CVE-2026-41579: opencontainers runc symlink following in rootfs setup](https://junglewise.ai/threats/cve-2026-41579-opencontainers-runc-symlink-following-in-rootfs-setup) (low, CVSS 3.3, published 1 Jul 2026) - [CVE-2025-52565: runc container escape with malicious config due to /dev/console mount and related races](https://junglewise.ai/threats/cve-2025-52565-runc-container-escape-with-malicious-config-due-to-dev-console) (medium, CVSS 4, published 18 Nov 2025) - [CVE-2025-52881: runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects](https://junglewise.ai/threats/cve-2025-52881-runc-container-escape-and-denial-of-service-due-to-arbitrary) (high, CVSS 7.5, published 6 Nov 2025) - [CVE-2025-31133: GO-2025-4096 - Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2025-31133-runc-multiple-container-escape-and-isolation-vulnerabilities) (high, CVSS 7.8, published 6 Nov 2025) - [CVE-2025-27612: Libcontainer is affected by capabilities elevation similar to GHSA-f3fp-gc8g-vw66](https://junglewise.ai/threats/cve-2025-27612-go-2025-3543-withdrawn-libcontainer-is-affected-by-capabilities) (low, CVSS 3.1, published 21 Mar 2025) - [CVE-2024-45310: GO-2024-3110 - Can be confused to create empty files/directories on the host in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2024-45310-runc-can-be-confused-to-create-empty-files-directories-on-the) (low, CVSS 3.1, published 6 Sep 2024) - [CVE-2021-30465: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs](https://junglewise.ai/threats/cve-2021-30465-mount-destinations-can-be-swapped-via-symlink-exchange-to-cause) (low, CVSS 3.1, published 21 Aug 2024) - [CVE-2016-9962: GO-2022-0835 - Information Exposure in RunC in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2016-9962-information-exposure-in-runc) (low, CVSS 3, published 21 Aug 2024) - [CVE-2022-29162: GO-2022-0452 - Default inheritable capabilities for linux container should be empty in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2022-29162-default-inheritable-capabilities-for-linux-container-should-be) (low, CVSS 3.1, published 21 Aug 2024) - [GO-2022-0396 - Devices resource list treated as a blacklist by default in github.com/opencontainers/runc](https://junglewise.ai/threats/go-2022-0396-devices-resource-list-treated-as-a-blacklist-by-default-in-6fc5dafc) (info, published 21 Aug 2024) - [CVE-2023-25809: GO-2023-1682 - Rootless: /sys/fs/cgroup is writable when cgroupns isn't unshared in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2023-25809-rootless-sys-fs-cgroup-is-writable-when-cgroupns-isn-t-unshared) (low, CVSS 3.1, published 20 Aug 2024) - [CVE-2023-28642: GO-2023-1683 - AppArmor bypass with symlinked /proc in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2023-28642-runc-apparmor-bypass-with-symlinked-proc) (low, CVSS 3.1, published 20 Aug 2024) - [CVE-2023-27561: GO-2023-1627 - Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2023-27561-opencontainers-runc-incorrect-authorization-vulnerability) (low, CVSS 3.1, published 20 Aug 2024) - [Withdrawn: Runc allows an arbitrary systemd property to be injected](https://junglewise.ai/threats/withdrawn-runc-allows-an-arbitrary-systemd-property-to-be-injected-a81c2a76) (low, CVSS 3.1, published 26 Apr 2024) - [CVE-2024-21626: opencontainers runc container breakout via leaked file descriptors](https://junglewise.ai/threats/cve-2024-21626-opencontainers-runc-container-breakout-via-leaked-file) (high, CVSS 8.6, published 31 Jan 2024) - [CVE-2021-43784: GO-2022-0274 - Namespace restriction bypass in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2021-43784-overflow-in-netlink-bytemsg-length-field-allows-attacker-to) (low, CVSS 3.1, published 15 Jul 2022) - [devices resource list treated as a blacklist by default](https://junglewise.ai/threats/devices-resource-list-treated-as-a-blacklist-by-default-b4060ce9) (info, published 20 Dec 2021) - [CVE-2019-19921: opencontainers runc contains procfs race condition with a shared volume mount](https://junglewise.ai/threats/cve-2019-19921-opencontainers-runc-contains-procfs-race-condition-with-a-shared) (medium, CVSS 5, published 27 May 2021) - [CVE-2019-16884: GO-2021-0085 - Authorization bypass in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2019-16884-incorrect-authorization-in-runc) (low, CVSS 3.1, published 14 Apr 2021) - [CVE-2016-3697: GO-2021-0070 - Privilege escalation in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2016-3697-privilege-elevation-in-runc) (low, CVSS 3.1, published 14 Apr 2021) ## Most severe github.com/opencontainers/runc (Go) vulnerabilities - [CVE-2024-21626: opencontainers runc container breakout via leaked file descriptors](https://junglewise.ai/threats/cve-2024-21626-opencontainers-runc-container-breakout-via-leaked-file) (high, CVSS 8.6, published 31 Jan 2024) - [CVE-2025-31133: GO-2025-4096 - Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2025-31133-runc-multiple-container-escape-and-isolation-vulnerabilities) (high, CVSS 7.8, published 6 Nov 2025) - [CVE-2025-52881: runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects](https://junglewise.ai/threats/cve-2025-52881-runc-container-escape-and-denial-of-service-due-to-arbitrary) (high, CVSS 7.5, published 6 Nov 2025) - [CVE-2019-19921: opencontainers runc contains procfs race condition with a shared volume mount](https://junglewise.ai/threats/cve-2019-19921-opencontainers-runc-contains-procfs-race-condition-with-a-shared) (medium, CVSS 5, published 27 May 2021) - [CVE-2025-52565: runc container escape with malicious config due to /dev/console mount and related races](https://junglewise.ai/threats/cve-2025-52565-runc-container-escape-with-malicious-config-due-to-dev-console) (medium, CVSS 4, published 18 Nov 2025) - [CVE-2026-41579: opencontainers runc symlink following in rootfs setup](https://junglewise.ai/threats/cve-2026-41579-opencontainers-runc-symlink-following-in-rootfs-setup) (low, CVSS 3.3, published 1 Jul 2026) - [CVE-2021-30465: mount destinations can be swapped via symlink-exchange to cause mounts outside the rootfs](https://junglewise.ai/threats/cve-2021-30465-mount-destinations-can-be-swapped-via-symlink-exchange-to-cause) (low, CVSS 3.1, published 21 Aug 2024) - [CVE-2019-16884: GO-2021-0085 - Authorization bypass in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2019-16884-incorrect-authorization-in-runc) (low, CVSS 3.1, published 14 Apr 2021) - [CVE-2021-43784: GO-2022-0274 - Namespace restriction bypass in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2021-43784-overflow-in-netlink-bytemsg-length-field-allows-attacker-to) (low, CVSS 3.1, published 15 Jul 2022) - [CVE-2023-27561: GO-2023-1627 - Opencontainers runc Incorrect Authorization vulnerability in github.com/opencontainers/runc](https://junglewise.ai/threats/cve-2023-27561-opencontainers-runc-incorrect-authorization-vulnerability) (low, CVSS 3.1, published 20 Aug 2024) ## Vulnerabilities per week Nothing was published in the last eight weeks. | Week of | Vulns | Critical | Exploited | | --- | --- | --- | --- | | 17 Aug 2026 | 0 | 0 | 0 | | 24 Aug 2026 | 0 | 0 | 0 | | 31 Aug 2026 | 0 | 0 | 0 | | 7 Sep 2026 | 0 | 0 | 0 | | 14 Sep 2026 | 0 | 0 | 0 | | 21 Sep 2026 | 0 | 0 | 0 | | 28 Sep 2026 | 0 | 0 | 0 | | 5 Oct 2026 | 0 | 0 | 0 | | 12 Oct 2026 | 0 | 0 | 0 | | 19 Oct 2026 | 0 | 0 | 0 | | 26 Oct 2026 | 0 | 0 | 0 | | 2 Nov 2026 | 0 | 0 | 0 | | 9 Nov 2026 | 0 | 0 | 0 | ## Other Go technologies - [github.com/mattermost/mattermost-server (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server): 297 vulnerabilities - [github.com/mattermost/mattermost-server/v6 (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v6): 222 vulnerabilities - [github.com/mattermost/mattermost/server/v8 (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v8): 207 vulnerabilities - [github.com/mattermost/mattermost-server/v5 (Go)](https://junglewise.ai/threats/technologies/github-com-mattermost-mattermost-server-v5): 199 vulnerabilities - [stdlib (Go)](https://junglewise.ai/threats/technologies/go-stdlib): 178 vulnerabilities - [github.com/siyuan-note/siyuan/kernel (Go)](https://junglewise.ai/threats/technologies/github-com-siyuan-note-siyuan-kernel): 160 vulnerabilities - [code.gitea.io/gitea (Go)](https://junglewise.ai/threats/technologies/code-gitea-io-gitea): 126 vulnerabilities - [code.vikunja.io/api (Go)](https://junglewise.ai/threats/technologies/code-vikunja-io-api): 91 vulnerabilities - [gogs.io/gogs (Go)](https://junglewise.ai/threats/technologies/gogs-io-gogs): 81 vulnerabilities - [github.com/traefik/traefik/v2 (Go)](https://junglewise.ai/threats/technologies/github-com-traefik-traefik-v2): 78 vulnerabilities - [github.com/traefik/traefik (Go)](https://junglewise.ai/threats/technologies/github-com-traefik-traefik): 75 vulnerabilities - [github.com/usememos/memos (Go)](https://junglewise.ai/threats/technologies/github-com-usememos-memos): 75 vulnerabilities ## Sources NVD, GitHub Security Advisories, OSV, the CISA Known Exploited Vulnerabilities catalog, FIRST EPSS and vendor advisories. Rebuilt every hour. Cite as: Junglewise Threat Intelligence, "github.com/opencontainers/runc (Go) vulnerabilities", https://junglewise.ai/threats/technologies/github-com-opencontainers-runc, 13 November 2026.