CVE-2026-64773
HighCVSS 7.5Exploitation Probability (EPSS)
Low risk4th percentile - higher than 4% of all known CVEs
Summary
An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wait can be stretched. This vulnerability is addressed in container version 1.2.0.
Risk Assessment
Risk of host memory exhaustion, potentially leading to denial of service or performance degradation.
Recommendation
Update the container to version 1.2.0 or later, which includes the fix.
Other vulnerabilities in Container
See all- CVE-2026-20613High
The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This can allow extracting a file to any user-writable location using relative pathnames. The issue is addressed in container 0.8.0 and containerization 0.21.0.
- CVE-2026-64777Medium
A malicious builder peer may be able to request an in-context file by name from the host and receive the contents of whatever the name resolves to, even when it resolves outside the build context. This vulnerability is addressed in container version 1.2.0.
Original NVD description (English source)
An attacker that can reach a container's published TCP port may be able to force the host's forwarding process to buffer an unbounded amount of that client's data in memory, for as long as the backend container connection takes to complete — with no cap on how much accumulates or how long the wait can be stretched. This vulnerability is addressed in container version 1.2.0.