When the isula load command is used to load malicious images, attackers can execute arbitrary code.

When the isula export command is used to export a container to an image and the container is controlled by an attacker, the attacker can escape the container.

iSulad uses the lcr+lxc runtime (default) to run malicious images, which can cause DOS.

When malicious images are pulled by isula pull, attackers can execute arbitrary code.