Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
containerd is an open-source container runtime. In versions prior to 1.7.32, 2.0.9, 2.2.4 and 2.3.1, containers launched with a numeric User directive that cannot be parsed as a 32-bit integer are incorrectly treated as a username, leading to runAsNonRoot evasion. If a crafted image provides an /etc/passwd file mapping this large numeric string to root, the container ultimately runs as root (UID 0). This allows the Kubernetes runAsNonRoot restriction to be bypassed, causing unexpected behavior for environments that require containers to run as a non-root user. This issue has been fixed in versions 1.7.32, 2.0.9, 2.2.4 and 2.3.1.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
AVAILABLE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
| Date | Total | Labels |
|---|
| 2026-05-22 | 1 | Disclosure1 |
| 2026-06-09 | 1 | Patch1 |
| 2026-07-03 | 1 | Disclosure1 |
CVE-2026-46680: containerd lets you bypass runAsNonRoot by exploiting integer overflow in User directive parsing. You end up as root even when Kubernetes policy says you can't. Here's how it works:
Post summary
CVE-2026-46680 is disclosed as an integer‑overflow flaw in containerd’s User directive parsing that can bypass runAsNonRoot restrictions, enabling privilege escalation to root.
🛡️ Cloud Native Security Updates (Week 24, 2026). Envoy v1.38.1+ mitigates CVE-2026-47774. containerd v2.1.8 fixes CVE-2026-46680. Longhorn v1.12.0: V2 Data Engine GA. https://lwcn.dev/newsletter/2026-week-24/
Post summary
The note announces that specific updates of Envoy and containerd now mitigate CVE-2026-47774 and CVE-2026-46680, providing patch information.
🔴 containerd, Input Validation Error, #CVE-2026-46680 (High) https://dailycve.com/containerd-input-validation-error-cve-2026-46680-high/
Post summary
The post announces a high‑severity input validation error in containerd (CVE‑2026‑46680) but does not provide evidence of exploitation, PoC, or remediation details.
1 of 1 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | linuxfoundation | containerd | - | - | - |