Copyright © 2012 Red Hat, Inc. All rights reserved.
Important
2026-07-01T18:10:41
github.com/containerd/containerd: containerd: Arbitrary host file read via symlink following in CRI checkpoint restore
6.5
CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
CWE-59
containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a bug where the CRI plugin restores container.log from a checkpoint image without validating a symlinked path. This could result in reading an arbitrary file on the host via kubectl logs. This issue has been fixed in versions 2.3.2, 2.2.5 and 2.1.9.
A flaw was found in containerd, an open-source container runtime. The Container Runtime Interface (CRI) plugin incorrectly restores container logs from a checkpoint image. This vulnerability, categorized as a Path Traversal (CWE-61), allows an attacker to read arbitrary files on the host system by manipulating symlinked paths during the checkpoint restore process. This can lead to unauthorized information disclosure from the host.
This vulnerability is not exploitable in several Red Hat products listed in the affect table. These products use CRI-O as the container runtime rather than containerd. Although some shipped images include the containerd Go module (primarily v1.x, and in a few cases containerd v2.x API client libraries) as a build-time dependency for OCI image handling, they do not execute the containerd daemon or its CRI plugin. As a result, the vulnerable containerd CRI checkpoint-restore code path is not exercised.
For Red Hat OpenShift and layered products, CRI-O is the supported container runtime, so the vulnerable containerd CRI checkpoint-restore code path is not exercised during normal cluster operation. Customers should nevertheless apply Red Hat product errata as they become available to receive updates for affected operator, must-gather and tooling images that may bundle the containerd Go module.
If containerd is deployed as the container runtime with CRI checkpoint/restore enabled, disable checkpoint/restore functionality until a fixed version of containerd can be applied.
Red Hat Hardened Images
2026-05-09T00:00:00Z
RHSA-2026:15862
trivy-main-0.69.3-1.2.hum1
Red Hat Hardened Images
2026-06-29T00:00:00Z
RHSA-2026:32963
grype-main-0.115.0-0.1.hum1
Red Hat Hardened Images
2026-06-29T00:00:00Z
RHSA-2026:32974
syft-main-1.46.0-0.1.hum1
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/cephcsi-rhel9:1786701839
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/cephcsi-rhel9-operator:1786701555
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/mcg-core-rhel9:1786702052
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/mcg-rhel9-operator:1786702559
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/ocs-client-console-rhel9:1786702713
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/ocs-client-rhel9-operator:1786702264
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/ocs-metrics-exporter-rhel9:1786702448
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/ocs-rhel9-operator:1786702276
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-cli-rhel9:1786702440
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-cloudnative-pg-rhel9-operator:1786702315
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-console-rhel9:1786703071
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-cosi-sidecar-rhel9:1786702563
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-csi-addons-rhel9-operator:1786702636
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-csi-addons-sidecar-rhel9:1786702623
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-multicluster-console-rhel9:1786703137
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-multicluster-rhel9-operator:1786702716
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-must-gather-rhel9:1786702872
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odf-rhel9-operator:1786702949
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/odr-rhel9-operator:1786702917
Red Hat Openshift Data Foundation 4.19
2026-08-18T00:00:00Z
RHSA-2026:56366
odf4/rook-ceph-rhel9-operator:1786703143
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/cephcsi-rhel9:1786627460
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/cephcsi-rhel9-operator:1786626399
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/mcg-core-rhel9:1786628235
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/mcg-rhel9-operator:1786627106
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/ocs-client-console-rhel9:1786629761
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/ocs-client-rhel9-operator:1786627559
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/ocs-metrics-exporter-rhel9:1786687918
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/ocs-rhel9-operator:1786629478
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-cli-rhel9:1786628142
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-cloudnative-pg-rhel9-operator:1786631508
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-console-rhel9:1786628053
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-cosi-sidecar-rhel9:1786627382
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-csi-addons-rhel9-operator:1786627430
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-csi-addons-sidecar-rhel9:1786629076
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-external-snapshotter-rhel9-operator:1786627469
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-external-snapshotter-sidecar-rhel9:1786644072
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-multicluster-console-rhel9:1786688215
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-multicluster-rhel9-operator:1786628340
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-must-gather-rhel9:1786628623
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odf-rhel9-operator:1786632256
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/odr-rhel9-operator:1786628935
Red Hat Openshift Data Foundation 4.2
2026-08-19T00:00:00Z
RHSA-2026:57013
odf4/rook-ceph-rhel9-operator:1786629548
Assisted Installer for Red Hat OpenShift Container Platform 2
Not affected
assisted/agent-preinstall-image-builder-rhel9
Assisted Installer for Red Hat OpenShift Container Platform 2
Not affected
rhai/assisted-installer-agent-rhel9
Confidential Compute Attestation
Not affected
openshift-sandboxed-containers/osc-cloud-api-adaptor-rhel9
Confidential Compute Attestation
Not affected
openshift-sandboxed-containers/osc-monitor-rhel9
Confidential Compute Attestation
Not affected
openshift-sandboxed-containers/osc-must-gather-rhel9
Confidential Compute Attestation
Not affected
openshift-sandboxed-containers/osc-podvm-payload-rhel9
Deployment Validation Operator
Not affected
dvo/deployment-validation-rhel8-operator
Exploit Intelligence
Will not fix
exploit-intelligence-tech-preview/agent-client-rhel9
Gatekeeper 3
Not affected
gatekeeper/gatekeeper-rhel9
Kernel Module Management Operator for Red Hat Openshift
Not affected
kmm/kernel-module-management-must-gather-rhel9
Logging Subsystem for Red Hat OpenShift
Not affected
openshift-logging/cluster-logging-rhel9-operator
Logging Subsystem for Red Hat OpenShift
Not affected
openshift-logging/logging-loki-rhel9
Logical Volume Manager Storage
Not affected
lvms4/lvms-must-gather-rhel9
Machine Deletion Remediation Operator
Not affected
workload-availability/machine-deletion-remediation-operator-bundle
Machine Deletion Remediation Operator
Not affected
workload-availability/machine-deletion-remediation-rhel9-operator
MCP Server for Red Hat OpenShift
Affected
openshift-mcp-beta/openshift-mcp-server-rhel9
Migration Toolkit for Containers
Not affected
rhmtc/openshift-migration-log-reader-rhel8
Migration Toolkit for Containers
Not affected
rhmtc/openshift-migration-must-gather-rhel8
Migration Toolkit for Virtualization
Not affected
migration-toolkit-virtualization/mtv-must-gather-rhel8
Migration Toolkit for Virtualization
Not affected
migration-toolkit-virtualization/mtv-must-gather-rhel9
Migration Toolkit for Virtualization
Not affected
migration-toolkit-virtualization/mtv-validation-rhel9
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-api-rhel9
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-cli-download-rhel9
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-controller-rhel9
Migration Toolkit for Virtualization
Not affected
mtv-candidate/mtv-must-gather-rhel8
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-openstack-populator-rhel9
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-operator-bundle
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-ova-provider-server-rhel9
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-populator-controller-rhel9
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-rhel9-operator
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-rhv-populator-rhel8
Migration Toolkit for Virtualization
Not affected
mtv-candidate/mtv-validation-rhel9
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-virt-v2v-rhel9
Migration Toolkit for Virtualization
Will not fix
mtv-candidate/mtv-vsphere-xcopy-volume-populator-rhel9
Multicluster Engine for Kubernetes
Not affected
multicluster-engine/assisted-installer-agent-rhel8
Multicluster Engine for Kubernetes
Not affected
multicluster-engine/assisted-installer-agent-rhel9
Multicluster Engine for Kubernetes
Not affected
multicluster-engine/assisted-installer-controller-rhel8
Multicluster Engine for Kubernetes
Not affected
multicluster-engine/assisted-installer-controller-rhel9
Multicluster Engine for Kubernetes
Not affected
multicluster-engine/assisted-installer-rhel8
Multicluster Engine for Kubernetes
Not affected
multicluster-engine/assisted-service-8-rhel8
Multicluster Engine for Kubernetes
Not affected
multicluster-engine/assisted-service-9-rhel9
Multicluster Engine for Kubernetes
Not affected
multicluster-engine/must-gather-rhel9
Multicluster Global Hub
Not affected
multicluster-globalhub/multicluster-globalhub-agent-rhel9
Multicluster Global Hub
Not affected
multicluster-globalhub/multicluster-globalhub-grafana-rhel9
Multicluster Global Hub
Not affected
multicluster-globalhub/multicluster-globalhub-manager-rhel9
Multicluster Global Hub
Not affected
multicluster-globalhub/multicluster-globalhub-rhel9-operator
Node HealthCheck Operator
Not affected
workload-availability/node-healthcheck-must-gather-rhel9
OpenShift API for Data Protection
Not affected
oadp/oadp-mustgather-rhel9
OpenShift Developer Tools and Services
Not affected
ocp-tools-4/jenkins-agent-base-rhel8
OpenShift Developer Tools and Services
Not affected
ocp-tools-4/jenkins-agent-base-rhel9
OpenShift Developer Tools and Services
Not affected
ocp-tools-4/jenkins-rhel8
OpenShift Developer Tools and Services
Not affected
ocp-tools-4/jenkins-rhel9
OpenShift Lightspeed
Not affected
openshift-lightspeed/lightspeed-agentic-sandbox-rhel9
OpenShift Lightspeed
Not affected
openshift-lightspeed/openshift-mcp-server-rhel9
OpenShift Pipelines
Not affected
openshift-pipelines/pipelines-controller-rhel8
OpenShift Pipelines
Not affected
openshift-pipelines/pipelines-entrypoint-rhel8
OpenShift Pipelines
Not affected
openshift-pipelines/pipelines-results-watcher-rhel8
OpenShift Pipelines
Not affected
openshift-pipelines/pipelines-sidecarlogresults-rhel8
OpenShift Serverless
Affected
openshift-serverless-1/serverless-must-gather-rhel9
OpenShift Service Mesh 2
Not affected
openshift-service-mesh/istio-must-gather-rhel9
OpenShift Service Mesh 2
Not affected
openshift-service-mesh/istio-rhel8-operator
OpenShift Service Mesh 3
Not affected
openshift-service-mesh/istio-must-gather-rhel9
OpenShift Service Mesh 3
Not affected
openshift-service-mesh/istio-rhel9-operator
Pen Drive Powered by Red Hat Lightspeed
Not affected
pen-drive/pen-drive-scanner-rhel9
Pen Drive Powered by Red Hat Lightspeed
Not affected
pen-drive/pen-drive-scanner-rhel9
Power monitoring for Red Hat OpenShift
Not affected
openshift-power-monitoring/power-monitoring-rhel9-operator
Red Hat Advanced Cluster Management for Kubernetes 2
Not affected
rhacm2/acm-grafana-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2
Not affected
rhacm2/acm-must-gather-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2
Not affected
rhacm2/multicloud-integrations-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2
Not affected
rhacm2/multiclusterhub-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2
Not affected
rhacm2/multicluster-operators-channel-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2
Not affected
rhacm2/multicluster-operators-subscription-rhel9
Red Hat Advanced Cluster Management for Kubernetes 2
Not affected
rhacm2/submariner-operator-bundle
Red Hat Advanced Cluster Management for Kubernetes 2
Not affected
rhacm2/submariner-rhel9-operator
Red Hat Advanced Cluster Security 4
Not affected
advanced-cluster-security/rhacs-main-rhel8
Red Hat Advanced Cluster Security 4
Not affected
advanced-cluster-security/rhacs-main-rhel9
Red Hat Advanced Cluster Security 4
Not affected
advanced-cluster-security/rhacs-operator-bundle
Red Hat Advanced Cluster Security 4
Not affected
advanced-cluster-security/rhacs-rhel8-operator
Red Hat Advanced Cluster Security 4
Not affected
advanced-cluster-security/rhacs-rhel9-operator
Red Hat Advanced Cluster Security 4
Not affected
advanced-cluster-security/rhacs-roxctl-rhel8
Red Hat Advanced Cluster Security 4
Not affected
advanced-cluster-security/rhacs-roxctl-rhel9
Red Hat Advanced Cluster Security 4
Not affected
advanced-cluster-security/rhacs-scanner-v4-rhel8
Red Hat Advanced Cluster Security 4
Not affected
advanced-cluster-security/rhacs-scanner-v4-rhel9
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-24/aap-must-gather-rhel8
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-25/aap-must-gather-rhel8
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-26/aap-must-gather-rhel9
Red Hat Ansible Automation Platform 2
Not affected
ansible-automation-platform-27/aap-must-gather-rhel9
Red Hat Build of Kueue
Not affected
kueue/kueue-must-gather-rhel9
Red Hat Ceph Storage 6
Fix deferred
rhceph/rhceph-promtail-rhel9
Red Hat Ceph Storage 9
Fix deferred
rhceph/alloy-rhel10
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-must-gather-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-spark-operator-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th06-cpu-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-th06-cuda130-torch291-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-minimal-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-pytorch-llmcompressor-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-tensorflow-cuda-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9
Red Hat OpenShift AI (RHOAI)
Not affected
rhoai/rhai-cli-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/cnf-tests-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/cnf-tests-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/container-networking-plugins-microshift-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4-dev-preview-beta/openperouter-edge-rhel10-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4-dev-preview-beta/openperouter-operator-bundle
Red Hat OpenShift Container Platform 4
Not affected
openshift4-dev-preview-beta/openperouter-rhel9-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/kube-compare-artifacts-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/lifecycle-agent-rhel9-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/metallb-rhel8-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/metallb-rhel9-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/network-tools-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/network-tools-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/numaresources-must-gather-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/numaresources-operator-bundle
Red Hat OpenShift Container Platform 4
Not affected
openshift4/numaresources-rhel9-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/oc-mirror-plugin-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/oc-mirror-plugin-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-agent-installer-api-server-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-agent-installer-api-server-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-agent-installer-csr-approver-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-agent-installer-csr-approver-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-agent-installer-node-agent-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-agent-installer-orchestrator-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-agent-installer-orchestrator-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-ansible-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-azure-cluster-api-controllers-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-cli
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-cli-artifacts
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-cli-artifacts-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-cli-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-cluster-ingress-rhel9-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-cluster-kube-cluster-api-rhel8-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-cluster-olm-rhel9-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-console
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-console-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-container-networking-plugins-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-container-networking-plugins-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-csi-driver-shared-resource-mustgather-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-csi-driver-shared-resource-mustgather-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-deployer
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-deployer-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-docker-builder
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-docker-builder-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-docker-registry
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-helm-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-helm-rhel9-operator
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-local-storage-mustgather-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-local-storage-mustgather-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-machine-os-images-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-must-gather
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-must-gather-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-node-feature-discovery
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-olm-catalogd-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-olm-catalogd-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-olm-operator-controller-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-olm-operator-controller-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-olm-rukpak-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-olm-rukpak-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-operator-framework-tools-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-operator-lifecycle-manager
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-operator-lifecycle-manager-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-operator-registry
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-operator-registry-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-operator-sdk-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-operator-sdk-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-ovn-kubernetes
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-sdn-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-secrets-store-csi-mustgather-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-secrets-store-csi-mustgather-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-tests
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-tests-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-tools-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ose-tools-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ptp-must-gather-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ptp-must-gather-rhel9
Red Hat OpenShift Container Platform 4
Not affected
openshift4/ztp-site-generate-rhel8
Red Hat OpenShift Container Platform 4
Not affected
openshift-kni/commatrix
Red Hat OpenShift Dev Spaces
Not affected
devspaces/traefik-rhel9
Red Hat OpenShift for Windows Containers
Not affected
openshift4-wincw/windows-machine-config-rhel9-operator
Red Hat OpenShift GitOps
Not affected
openshift-gitops-1/argocd-rhel8
Red Hat OpenShift GitOps
Not affected
openshift-gitops-1/argocd-rhel9
Red Hat OpenShift GitOps
Not affected
openshift-gitops-1/must-gather-rhel8
Red Hat OpenShift GitOps
Not affected
openshift-gitops-1/must-gather-rhel9
Red Hat OpenShift Virtualization 4
Not affected
container-native-virtualization/cnv-must-gather-rhel8
Red Hat OpenShift Virtualization 4
Not affected
container-native-virtualization/cnv-must-gather-rhel9
Red Hat OpenShift Virtualization 4
Not affected
container-native-virtualization/multus-dynamic-networks-rhel9
Red Hat OpenStack Platform 16.2
Not affected
rhosp-rhel8/osp-director-operator-bundle
Red Hat OpenStack Platform 17.1
Not affected
rhosp-rhel9/osp-director-operator-bundle
Red Hat OpenStack Platform 18.0
Not affected
rhoso-operators/openstack-operator-bundle
Red Hat OpenStack Platform 18.0
Not affected
rhoso-operators/rabbitmq-cluster-rhel9-operator
Red Hat Trusted Artifact Signer
Not affected
rhtas/ec-rhel9
Red Hat Trusted Artifact Signer
Not affected
rhtas/policy-controller-rhel9-operator
Red Hat Trusted Profile Analyzer
Not affected
rhtpa/rhtpa-rhel9-operator
https://www.cve.org/CVERecord?id=CVE-2026-53489
https://nvd.nist.gov/vuln/detail/CVE-2026-53489
https://github.com/containerd/containerd/security/advisories/GHSA-rgh6-rfwx-v388