CVE-2026-22908CWE-266

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality

Critical · published January 15, 2026

CVSS v3.1
9.1
EPSS
1%
Percentile
47.4
In the wild
Unconfirmed
What it is

🚨 Unvalidated container image uploads could be your system's worst nightmare! It's like letting a delivery person drop off a mysterious package without checking what's inside. 🔥 Think of your system as a bustling restaurant kitchen. If a chef accepts any ingredient without inspection, it could lead to a disastrous meal. In this case, unvalidated container images are those unchecked ingredients that can spoil the whole dish and lead to chaos in your kitchen! An attacker could upload a malicious container image, gaining full access to your system. This could lead to catastrophic outcomes like data breaches, loss of integrity, and potentially wiping everything clean like a fire destroying a beloved restaurant—absolutely devastating!

Put simply

Think of your system as a bustling restaurant kitchen. If a chef accepts any ingredient without inspection, it could lead to a disastrous meal. In this case, unvalidated container images are those unchecked ingredients that can spoil the whole dish and lead to chaos in your kitchen! This vulnerability allows remote attackers to exploit unvalidated container image uploads, gaining unauthorized access to the system and compromising its integrity and confidentiality. It’s a recipe for disaster if not addressed quickly!

What to do

An attacker could upload a malicious container image, gaining full access to your system. This could lead to catastrophic outcomes like data breaches, loss of integrity, and potentially wiping everything clean like a fire destroying a beloved restaurant—absolutely devastating! Immediately implement strict validation checks on uploaded container images. Ensure that only trusted images are used and consider deploying a security tool to scan images for vulnerabilities. Also, patch to the latest version if available and conduct a security audit. You've got this! With a few simple steps, you can secure your system and keep those pesky attackers at bay! 🛡️

The record
Technical detail
CVSS v3.1
9.1 · CRITICAL
Vector
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H
CVSS v4.0
Not supplied
EPSS
0.00588 · 47.4th percentile
Weakness
CWE-266 · Incorrect Privilege Assignment
Published
2026-01-15T13:00Z
EPSS history
Timeline
  • 15 JAN 13:00Z
    Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality
    cvelistv5