CVE-2026-53493

Vulnerability Description

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability. Versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 fix the issue.

Related Weaknesses (CWE)

CWE-400 CWE-834 CWE-770

References

https://github.com/containerd/containerd/security/advisories/GHSA-pg57-6jwg-q645

FAQ

What is CVE-2026-53493?

CVE-2026-53493 is a documented vulnerability. containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before conta...

How severe is CVE-2026-53493?

CVSS scoring is not yet available for CVE-2026-53493. Check NVD for updates.

Is there a patch for CVE-2026-53493?

Check the references section above for vendor advisories and patch information. Review vendor security bulletins for remediation guidance.