A critical vulnerability has been identified in containerd, an open-source container runtime, affecting versions prior to 2.3.2, 2.2.5, and 2.1.9. The vulnerability exists within the CRI checkpoint import process, where the software fails to validate image references specified in a checkpoint image's configuration. An attacker with permissions to create pods can exploit this by crafting a malicious checkpoint image, forcing containerd to pull a harmful image and assign it an arbitrary local tag. This compromises the node's local image cache. Subsequent pods using the poisoned tag with an IfNotPresent or Never pull policy may unknowingly execute the malicious image. This poses a significant risk to systems relying on containerd for runtime operations, as it enables unauthorized code execution and potential lateral movement within the environment. The CVSS score of 9.9 reflects the severity of this issue. Users are strongly advised to upgrade to the patched versions (2.3.2, 2.2.5, or 2.1.9) immediately to mitigate the risk. No workarounds are available aside from applying the necessary updates.