CRI-O checkpoint restore may ignore the destination Kubernetes security context and restore credentials, Linux capabilities, no_new_privs, and seccomp state from a malicious checkpoint image, enabling elevated execution (e.g., root/full caps) across container boundaries. Affects CRI-O >=1.34 and Red Hat OCP >=4.17. Upgrade to 1.36.6, 1.35.9, or 1.34.14, or disable restore (enable_criu_support=false/disable ContainerCheckpoint) and restrict pod creation RBAC.