CVE-2026-50195
CVE-2026-50195: 1 tracked advisory record across Red Hat. Compare vendor sources and published fix guidance.
Compare the source-linked records below. Ratings and product/version details belong to each advisory; they are not a single CVE-wide score or proof that every listed product is affected. How VulniPulse collects and checks evidence.
Vendor advisory comparison
Red Hat
1 advisory- Advisory severityMedium6.7
Medium [CVE-2026-50195] Arbitrary code execution via CRI checkpoint image tag poisoning
CVE-2026-50195Source published Source updated
containerd is an open-source container runtime. Versions prior to 2.3.2, 2.2.5 and 2.1.9 contain a vulnerability in the CRI checkpoint import process where it fails to validate the image references specified within a checkpoint image's configuration. An attacker with permissions to create pods can use a crafted checkpoint image to force containerd to pull a malicious image and assign it an arbitrary local tag, thereby poisoning the node's local image cache. Subsequently, if other pods on the same node attempt to use the poisoned tag with an IfNotPresent (or Never) pull policy, they will unknowingly execute the attacker's malicious image instead of the legitimate one. This can lead to a compromise of the affected pods, allowing the attacker to execute arbitrary code under the victim pod's…
- Affected products in this advisory
- Red Hat Hardened Images
- Source-reported affected versions
- < 2.3.2
- < 2.2.5
- < 2.1.9
- Source-reported fixed versions
- 2.3.2
- 2.2.5
- 2.1.9
- trivy-main-0.72.0-0.1.hum1
1 more entries in the full advisory.
- Mitigation guidance
- No mitigation is needed as the vulnerable code is not present in the containerd versions shipped in Red Hat products.
Android app · Google Play
Monitor future Red Hat CVEs from your phone.
Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 34 official vendor sources and 160+ reviewed platform categories.