GHSA-hp5j-2585-qx6gMediumCVSS 6.6

CRI-O Path Traversal vulnerability

Published
January 28, 2025
Last Modified
February 11, 2025

🔗 CVE IDs covered (1)

CVE-2025-0750 →

📋 Description

A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.

🎯 Affected products1

  • go/github.com/cri-o/cri-o:<= 1.33.0

🔗 References (5)