The ArchiveReader.extractContents() function used by cctl image load and container image load performs no pathname validation before extracting an archive member

A remote attacker who controls a container registry may be able to direct a client's token request to a host of the attacker's choice, and disclose the victim's registry…

An attacker who controls the registry, a mirror, or the network path to it may be able to serve arbitrary image content in response to a pull by digest, so that a user runs an…