Medium severity · published May 20, 2025
CVE-2025-47290
containerd is a container runtime
5.9
CVSS
0.5%
EPSS
No
On KEV
Description
containerd is a container runtime. A time-of-check to time-of-use (TOCTOU) vulnerability was found in containerd v2.1.0. While unpacking an image during an image pull, specially crafted container images could arbitrarily modify the host file system. The only affected version of containerd is 2.1.0. Other versions of containerd are not affected. This bug has been fixed in containerd 2.1.1. Users should update to this version to resolve the issue. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.
CVSS vector
CVSS:3.1/AV:N/AC:H/PR:N/UI:N/S:U/C:N/I:H/A:N
Attack vector
Network
Complexity
High
Privileges
None
User interaction
None
Confidentiality
None
Integrity
High
Availability
None
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 43% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
CO
Containerd · Linuxfoundation
2.1.0 · source: NVD
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-47290
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-47290
Patch
https://github.com/containerd/containerd/commit/cada13298fba85493badb6fecb6ccf80e49673cc
Release Notes
https://github.com/containerd/containerd/releases/tag/v2.1.1
Vendor Advisory
https://github.com/containerd/containerd/security/advisories/GHSA-cm76-qm8v-3j95
More from Containerd
9.9
CVE-2026-50195
containerd: CRI checkpoint import allows local image tag poisoning
9.6
CVE-2026-53492
containerd CRI checkpoint restore CDI annotation smuggling
9.1
CVE-2021-43816
containerd is an open source container runtime
8.8
CVE-2026-53488
containerd CRI plugin: — image-config `LABEL` flows to restart-monitor `binary://` logger: host-root command execution from an image pull
7.8
CVE-2026-46680
containerd user ID handling bypass allows runAsNonRoot evasion