A format string vulnerability exists in openEuler iSulad on Linux up to version 2.1.6. The issue occurs when the iSulad daemon reads stderr output from the shim process during container lifecycle operations. If the output contains format specifiers, it may lead to information leakage, denial of service, or arbitrary writes.