CVE-2025-62161 - Vulnerability Details - OpenCVE

Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixed in version 0.5.7.

Attack Vector Local

Attack Complexity Low

Privileges Required Low

Attack Requirements Present

User Interaction Active

Vulnerable System Confidentiality Impact High

Vulnerable System Integrity Impact High

Vulnerable System Availability Impact High

Subsequent System Confidentiality Impact High

Subsequent System Integrity Impact High

Subsequent System Availability Impact High

No CVSS v3.1

No CVSS v3.0

No CVSS v2

This CVE is not in the KEV list.

No EPSS score available.

Key SSVC decision points have not yet been added.

No data.

No data.

No data.

No data.

Advisories

Source	ID	Title
Github GHSA	GHSA-4g74-7cff-xcv8	youki container escape via "masked path" abuse due to mount race conditions

Fixes

Solution

No solution given by the vendor.

Workaround

No workaround given by the vendor.

References

Link	Providers
https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a
https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8

History

Wed, 05 Nov 2025 23:30:00 +0000

Type	Values Removed	Values Added
Description		Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixed in version 0.5.7.
Title		youki container escape via "masked path" abuse due to mount race conditions
Weaknesses		CWE-363 CWE-61
References		https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8
Metrics		cvssV4_0 `{'score': 7.3, 'vector': 'CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H'}`

MITRE

Status: PUBLISHED

Assigner: GitHub_M

Published: 2025-11-05T23:09:09.014Z

Updated: 2025-11-05T23:09:09.014Z

Reserved: 2025-10-07T16:12:03.424Z

Link: CVE-2025-62161

Vulnrichment

No data.

NVD

Status : Received

Published: 2025-11-06T00:15:36.760

Modified: 2025-11-06T00:15:36.760

Link: CVE-2025-62161

Redhat

No data.

OpenCVE Enrichment

No data.

{"dataType": "CVE_RECORD", "dataVersion": "5.2", "cveMetadata": {"cveId": "CVE-2025-62161", "assignerOrgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "state": "PUBLISHED", "assignerShortName": "GitHub_M", "dateReserved": "2025-10-07T16:12:03.424Z", "datePublished": "2025-11-05T23:09:09.014Z", "dateUpdated": "2025-11-05T23:09:09.014Z"}, "containers": {"cna": {"title": "youki container escape via \"masked path\" abuse due to mount race conditions", "problemTypes": [{"descriptions": [{"cweId": "CWE-363", "lang": "en", "description": "CWE-363: Race Condition Enabling Link Following", "type": "CWE"}]}, {"descriptions": [{"cweId": "CWE-61", "lang": "en", "description": "CWE-61: UNIX Symbolic Link (Symlink) Following", "type": "CWE"}]}], "metrics": [{"cvssV4_0": {"attackVector": "LOCAL", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "privilegesRequired": "LOW", "userInteraction": "ACTIVE", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "subAvailabilityImpact": "HIGH", "baseScore": 7.3, "baseSeverity": "HIGH", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H", "version": "4.0"}}], "references": [{"name": "https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8", "tags": ["x_refsource_CONFIRM"], "url": "https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8"}, {"name": "https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8", "tags": ["x_refsource_MISC"], "url": "https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8"}, {"name": "https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a", "tags": ["x_refsource_MISC"], "url": "https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a"}], "affected": [{"vendor": "youki-dev", "product": "youki", "versions": [{"version": "< 0.5.7", "status": "affected"}]}], "providerMetadata": {"orgId": "a0819718-46f1-4df5-94e2-005712e83aaa", "shortName": "GitHub_M", "dateUpdated": "2025-11-05T23:09:09.014Z"}, "descriptions": [{"lang": "en", "value": "Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixed in version 0.5.7."}], "source": {"advisory": "GHSA-4g74-7cff-xcv8", "discovery": "UNKNOWN"}}}}

{"cveTags": [], "descriptions": [{"lang": "en", "value": "Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixed in version 0.5.7."}], "id": "CVE-2025-62161", "lastModified": "2025-11-06T00:15:36.760", "metrics": {"cvssMetricV40": [{"cvssData": {"Automatable": "NOT_DEFINED", "Recovery": "NOT_DEFINED", "Safety": "NOT_DEFINED", "attackComplexity": "LOW", "attackRequirements": "PRESENT", "attackVector": "LOCAL", "availabilityRequirement": "NOT_DEFINED", "baseScore": 7.3, "baseSeverity": "HIGH", "confidentialityRequirement": "NOT_DEFINED", "exploitMaturity": "NOT_DEFINED", "integrityRequirement": "NOT_DEFINED", "modifiedAttackComplexity": "NOT_DEFINED", "modifiedAttackRequirements": "NOT_DEFINED", "modifiedAttackVector": "NOT_DEFINED", "modifiedPrivilegesRequired": "NOT_DEFINED", "modifiedSubAvailabilityImpact": "NOT_DEFINED", "modifiedSubConfidentialityImpact": "NOT_DEFINED", "modifiedSubIntegrityImpact": "NOT_DEFINED", "modifiedUserInteraction": "NOT_DEFINED", "modifiedVulnAvailabilityImpact": "NOT_DEFINED", "modifiedVulnConfidentialityImpact": "NOT_DEFINED", "modifiedVulnIntegrityImpact": "NOT_DEFINED", "privilegesRequired": "LOW", "providerUrgency": "NOT_DEFINED", "subAvailabilityImpact": "HIGH", "subConfidentialityImpact": "HIGH", "subIntegrityImpact": "HIGH", "userInteraction": "ACTIVE", "valueDensity": "NOT_DEFINED", "vectorString": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X", "version": "4.0", "vulnAvailabilityImpact": "HIGH", "vulnConfidentialityImpact": "HIGH", "vulnIntegrityImpact": "HIGH", "vulnerabilityResponseEffort": "NOT_DEFINED"}, "source": "security-advisories@github.com", "type": "Secondary"}]}, "published": "2025-11-06T00:15:36.760", "references": [{"source": "security-advisories@github.com", "url": "https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a"}, {"source": "security-advisories@github.com", "url": "https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8"}, {"source": "security-advisories@github.com", "url": "https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8"}], "sourceIdentifier": "security-advisories@github.com", "vulnStatus": "Received", "weaknesses": [{"description": [{"lang": "en", "value": "CWE-61"}, {"lang": "en", "value": "CWE-363"}], "source": "security-advisories@github.com", "type": "Primary"}]}