opencontainers/runc Security Advisories | GitStock

medium2026-06-22

runc: Malicious image with /dev symlink can trigger limited host filesystem integrity violations

GHSA-xjvp-4fhw-gc47 · CVE-2026-41579

high2025-11-05

runc container escape and denial of service due to arbitrary write gadgets and procfs write redirects

GHSA-cgrx-mc8f-2prm · CVE-2025-52881

high2025-11-05

runc container escape with malicious config due to /dev/console mount and related races

GHSA-qw9x-cqr3-wc7r · CVE-2025-52565

high2025-11-05

runc container escape via "masked path" abuse due to mount race conditions

GHSA-9493-h29p-rfm2 · CVE-2025-31133

medium2024-09-03

runc can be confused to create empty files/directories on the host

GHSA-jfvp-7x6p-h2pv · CVE-2024-45310

high2024-01-31

runc vulnerable to container breakout through process.cwd trickery and leaked fds

GHSA-xr7r-f8xq-vfvv · CVE-2024-21626

medium2023-03-30

runc AppArmor bypass with symlinked /proc

GHSA-g2j6-57v7-gm8c · CVE-2023-28642

low2023-03-30

rootless: `/sys/fs/cgroup` is writable when cgroupns isn't unshared in runc

GHSA-m8cg-xc2p-r3fc · CVE-2023-25809

high2023-03-03

Opencontainers runc Incorrect Authorization vulnerability

GHSA-vpvm-3wq2-2wvm · CVE-2023-27561

high2022-02-22

Incorrect Authorization in runc

GHSA-fgv8-vj5c-2ppq · CVE-2019-16884

high2021-12-20

Privilege Elevation in runc

GHSA-q3j5-32m5-58c2 · CVE-2016-3697

medium2021-12-07

Overflow in netlink bytemsg length field allows attacker to override netlink-based container configuration in RunC

GHSA-v95c-p5hm-xq8f · CVE-2021-43784