A flaw in CRI‑O’s bind_mount_prefix handling allows a container or local attacker to use a hostPath that contains an intermediate absolute symlink. This can cause the bind mount source to resolve outside the intended prefixed root, giving the attacker unauthorized access to host files or the ability to elevate privileges on the host system.

Red Hat OpenShift Container Platform 4 is affected. The vulnerability impacts the CRI‑O runtime component shipped with this platform. No specific product versions are listed, so all releases that include CRI‑O must be examined for the patch.

The CVSS score of 5.5 indicates a moderate severity. The EPSS score is not available, so the current exploitation probability is unknown. The issue is not listed in the CISA KEV catalog. The attack vector is likely local or through a compromised container; a malicious CRI hostPath with an intermediate symlink can bypass the configured bind_mount_prefix. The weakness is classified as CWE‑59 – an unsafe relative path that can be exploited to access unintended files.