CVE-2025-62161CRITICAL 10.0EPSS p11.8%
CVE-2025-62161CVE-2025-62161
Description
Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixed in version 0.5.7.
Scoring
| CVSS 3.1 | 10.0 (CRITICAL) |
| Vector | CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:H/A:H |
| EPSS | 0.22% probability of exploitation · percentile 11.8% · 2026-06-19T12:03:05Z |
| Published | 2025-11-06 |
| Last modified | 2025-11-10 |
Underlying weaknesses· 2
References
- https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a
- https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8
- https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8
- https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8
- https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8
2
| Type | Target | Confidence | Tier |
|---|---|---|---|
| Weakness | Race Condition Enabling Link Followingcwe-363 | 0% | live |
| Weakness | UNIX Symbolic Link (Symlink) Followingcwe-61 | 0% | live |
Related by meaning· 6
Nearest entities by semantic similarity across the cs-graph corpus.