CRI-O
Security Risk Profile
56
/100
mediumSecurity Risk Score
Comprehensive risk assessment based on 6 vulnerabilities, EPSS scores, exploitation status, and remediation availability.
📅 Data spans from September 30, 2024 to present
6
Total CVEs
2
Critical+High
0
Exploited
2
Unpatched
Threat Assessment
Avg CVSS
5.9
Base severity
Avg EPSS
0%
Exploit probability
Unpatched
2
Critical/High
Risk Level
56/100
medium
📈 1 in Last 30 Days
Severity Distribution
Critical
0High
2Medium
4Low
0Exploit Likelihood
>50% chance
020-50%
05-20%
0<5%
0Age Distribution
Common Weaknesses (CWE)
1
Path Traversal
2
Most Affected Products
1. CRI-O CRI-O6
2. go/github.com/cri-o/cri-o2
3. Red Hat OpenShift1
4. Kubernetes Kubelet1
5. Kubernetes kube-apiserver1
Recent Vulnerabilities
See more →CVE-2026-15809
CVSS 7.8high
Github.com/cri-o/cri-o: fix bypass for cve-2022-4318 — /etc/passwd injection via home env
7/15/2026🔧 No Patch
REDHAT-BUG-2457729
CVSS 7.0high
4/13/2026🔧 No Patch
CVE-2025-4437
CVSS 5.7medium
Cri-o: large /etc/passwd file may lead to denial of service
6/26/2025🔧 No Patch
CVE-2025-0750
CVSS 6.6medium
Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
1/22/2025🔧 No Patch
REDHAT-BUG-2339405
CVSS 4.0medium
1/22/2025🔧 No Patch
REDHAT-BUG-2315691
CVSS 4.0medium
9/30/2024🔧 No Patch
Monitor CRI-O in Real-Time
Get instant alerts when new vulnerabilities are discovered. Stay ahead of security threats with SecAlerts.