Skip to content
fr Sign in
8.5 High

CVE-2025-24965 crun is an open source OCI Container Runtime fully written in C

Description

crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are needed, only the ability for the current user to write to the target file. The problem is fixed in crun 1.20 and all users are advised to upgrade. There are no known workarounds for this vulnerability.

Affected products and versions

Product Affected versions Fixed in
crun 1.20 earliest → < 1.20 1.20

References

Timeline

  1. Published
  2. Last modified

Other CVEs of crun

The 4 CVEs of crun →
CVE-2026-88264 Crun: crun: /dev/console symlink follow allows root-owned file creation outside the rootfs 5.6 Medium CVE-2026-47766 crun is an open source OCI Container Runtime fully written in C 5.1 Medium CVE-2026-30892 crun is an open source OCI Container Runtime fully written in C 0.0 Not rated
Track this CVE