CVE-2026-53493

containerd is an open-source container runtime. Prior to versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1, a crafted OCI index graph can force very high CPU/memory usage during PullImage (before container start), causing long ContainerCreating stalls and, at larger sizes, node/runtime instability. Versions 1.7.36, 2.0.13, 2.2.9, 2.3.6, and 2.4.1 fix the issue.

• CWE-400
• CWE-770
• CWE-834

• https://github.com/containerd/containerd/security/advisories/GHSA-pg57-6jwg-q645

Published

Sep 25, 2026

Last Modified

Sep 25, 2026

Status

Awaiting Analysis

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2026-53486The decompress package for Node.js extracts archives. Prior …9.1
• CVE-2026-53487Kite is a Kubernetes dashboard. Prior to version 0.12.3, aut…4.3
• CVE-2026-53488containerd is an open-source container runtime. In versions …8.8
• CVE-2026-53489containerd is an open-source container runtime. Versions pri…6.5
• CVE-2026-5349A vulnerability was identified in Trendnet TEW-657BRM 1.00.1…8.8
• CVE-2026-53492containerd is an open-source container runtime. In Versions …9.6
• CVE-2026-53495containerd is an open-source container runtime. Prior to 1.7…6.8
• CVE-2026-53496ExifReader is a JavaScript Exif information parser. Prior to…5.3
• CVE-2026-53497CrossWatch (CW) is a synchronization engine. Prior to versio…5.3
• CVE-2026-53499FORT Validator is a Resource Public Key Infrastructure (RPKI…7.2
• CVE-2026-5350A security flaw has been discovered in Trendnet TEW-657BRM 1…8.8
• CVE-2026-53500Thumbor is an open-source photo thumbnail service by globo.c…8.2