GHSA-4g74-7cff-xcv8
Critical · 10.0CVSS
10.0
EPSS
—
Published
Nov 5, 2025
CISA due date
—
The record
youki container escape via "masked path" abuse due to mount race conditions
Affected packages
| Ecosystem | Package | Introduced | Fixed |
|---|---|---|---|
| crates.io | youki | 0 | 0.5.7 |
Related vulnerabilities
- CVE-2025-62161 youki container escape via "masked path" abuse due to mount race conditions Same vulnerability
- CVE-2025-62596 youki container escape and denial of service due to arbitrary write gadgets and procfs… Also affects youki
- GHSA-vf95-55w6-qmrf youki container escape and denial of service due to arbitrary write gadgets and procfs… Also affects youki
- CVE-2025-52565 container escape due to /dev/console mount and related races CWE-363
- CVE-2025-31133 runc container escape via "masked path" abuse due to mount race conditions CWE-363
- CVE-2025-52881 runc container escape and denial of service due to arbitrary write gadgets and procfs… CWE-363
- CVE-2022-21658 Rust is a multi-paradigm, general-purpose programming language designed for performance… CWE-363
- CVE-2026-106566 ImageMagick is free and open-source software used for editing and manipulating digital… CWE-61