UpHeron
All vulnerabilities

Servers and applications

CVE-2021-41103

Insufficiently restricted permissions on container root and plugin directories

Severity
High 7.8
Published
4 Oct 2021
Last changed
17 Jun 2026
Added to UpHeron
1 Nov 2026
Fixed in
1.4.11, 1.5.7
Also known as
GHSA-c2h3-6mxw-7mvq
Sources
NVD, Project advisories (GitHub)

Description

containerd is an open source container runtime with an emphasis on simplicity, robustness and portability. A bug was found in containerd where container root directories and some plugins had insufficiently restricted permissions, allowing otherwise unprivileged Linux users to traverse directory contents and execute programs. When containers included executable programs with extended permission…

Affected software

SoftwareAffected versions
containerdServers and applications · cpe:a:linuxfoundation:containerd
  • Every version before 1.4.11
  • From 1.5.0 before 1.5.7
containerdServers and applications · github:containerd/containerd
  • Every version before 1.4.11

References

  • NVD https://nvd.nist.gov/vuln/detail/CVE-2021-41103
  • CVE.org https://www.cve.org/CVERecord?id=CVE-2021-41103
  • GitHub Advisory Database https://github.com/advisories/GHSA-c2h3-6mxw-7mvq
  • github.com https://github.com/containerd/containerd/security/advisories/GHSA-c2h3-6mxw-7mvq