CVE-2024-25621

CVE-2024-25621 is a high-severity vulnerability affecting containerd versions 0.1.0 through 1.7.28, 2.0.0-beta.0 through 2.0.6, 2.1.0-beta.0 through 2.1.4, and 2.2.0-beta.0 through 2.2.0-rc.1, where critical directories are created with overly broad default permissions. This local vulnerability (CVSS 7.8) allows an attacker with low privileges to achieve high confidentiality, integrity, and availability impacts. There is currently no evidence of active exploitation, public exploit code, or significant community discussion beyond a single mention of a patch. Organizations should update to fixed versions (1.7.29, 2.0.7, 2.1.5, 2.2.0) or implement workarounds such as manually adjusting directory permissions or running containerd in rootless mode.