CVE-2024-40635

containerd is an open-source container runtime. A bug was found in containerd prior to versions 1.6.38, 1.7.27, and 2.0.4 where containers launched with a User set as a `UID:GID` larger than the maximum 32-bit signed integer can cause an overflow condition where the container ultimately runs as root (UID 0). This could cause unexpected behavior for environments that require containers to run as a non-root user. This bug has been fixed in containerd 1.6.38, 1.7.27, and 2.04. As a workaround, ensure that only trusted images are used and that only trusted users have permissions to import images.

• CWE-190

• https://github.com/containerd/containerd/commit/05044ec0a9a75232cad458027ca83437aae3f4daPatch
• https://github.com/containerd/containerd/commit/1a43cb6a1035441f9aca8f5666a9b3ef9e70ab20Patch
• https://github.com/containerd/containerd/commit/cf158e884cfe4812a6c371b59e4ea9bc4c46e51aPatch
• https://github.com/containerd/containerd/security/advisories/GHSA-265r-hfxg-fhmgVendor Advisory
• https://lists.debian.org/debian-lts-announce/2025/05/msg00005.htmlMailing List, Third Party Advisory

Published

Mar 17, 2025

Last Modified

Jun 17, 2026

Status

Analyzed

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2024-4063A vulnerability was found in EZVIZ CS-C6-21WFR-8 5.2.7 Build…3.7
• CVE-2024-40630OpenImageIO is a toolset for reading, writing, and manipulat…4.3
• CVE-2024-40631Plate media is an open source, rich-text editor for React. E…8.1
• CVE-2024-40632Linkerd is an open source, ultralight, security-first servic…3.7
• CVE-2024-40633Sylius is an Open Source eCommerce Framework on Symfony. A s…5.3
• CVE-2024-40634Argo CD is a declarative, GitOps continuous delivery tool fo…7.5
• CVE-2024-40636Steeltoe is an open source project that provides a collectio…5.3
• CVE-2024-40637dbt enables data analysts and engineers to transform their d…7.8
• CVE-2024-40638GLPI is a free asset and IT management software package. An …8.8
• CVE-2024-40639Rejected reason: This CVE is a duplicate of another CVE.
• CVE-2024-4064A vulnerability was found in Tenda AC8 16.03.34.09. It has b…8.8
• CVE-2024-40640vodozemac is an open source implementation of Olm and Megolm…2.9