Containerization vulnerabilities

2 known vulnerabilities in Containerization from Apple. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 7.5 High severity

  containerization: URL Redirection to Untrusted Site

  CVE-2026-65388Sep 16, 2026Apple

  A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry credentials to that host. This vulnerability is addressed in containerization version 0.41

• 7.8 High severity

  Container: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2026-20613Jan 23, 2026Apple

  The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member. This means that a carelessly or maliciously constructed archive can extract a file into any user-