CVE-2026-22908

Critical · 9.1

CVSS

9.1

EPSS

0.6%

Published

Jan 15, 2026

CISA due date

—

The record

Uploading unvalidated container images may allow remote attackers to gain full access to the system, potentially compromising its integrity and confidentiality.

Affected packages

Ecosystem	Package	Introduced	Fixed