{"id":"EUVD-2025-37938","enisaUuid":"7f722c73-3497-3d9a-ae9d-3744626fca08","description":"Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path component-by-component, a shared-mount race can substitute intermediate components and redirect the final target. This issue is fixed in version 0.5.7.","datePublished":"Nov 5, 2025, 11:14:37 PM","dateUpdated":"Nov 6, 2025, 4:54:15 PM","baseScore":7.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/youki-dev/youki/security/advisories/GHSA-vf95-55w6-qmrf\nhttps://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a\nhttps://pkg.go.dev/github.com/cyphar/filepath-securejoin/pathrs-lite/procfs\nhttps://youtu.be/tGseJW_uBB8\nhttps://youtu.be/y1PaBzxwRWQ\n","aliases":"CVE-2025-62596\nGHSA-vf95-55w6-qmrf\n","assigner":"GitHub_M","epss":0.27,"enisaIdProduct":[{"id":"06ebab36-f4f0-3d43-93fb-944d96a24f45","product":{"name":"youki","vendor":{"name":"youki-dev"}},"product_version":"\u003c 0.5.7"}],"enisaIdVendor":[{"id":"f5b4484a-b9c0-35ac-b431-2b46856b6254","vendor":{"name":"youki-dev"}}],"enisaIdVulnerability":[{"id":"2bf38bcd-b4ea-3d84-90d7-cf211dc45d13","vulnerability":{"id":"CVE-2025-62596","description":"Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path component-by-component, a shared-mount race can substitute intermediate components and redirect the final target. This issue is fixed in version 0.5.7.","datePublished":"Nov 5, 2025, 11:14:37 PM","dateUpdated":"Nov 6, 2025, 4:54:15 PM","status":"PUBLISHED","baseScore":7.3,"baseScoreVersion":"4.0","baseScoreVector":"CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H","references":"https://github.com/youki-dev/youki/security/advisories/GHSA-vf95-55w6-qmrf\nhttps://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a\nhttps://pkg.go.dev/github.com/cyphar/filepath-securejoin/pathrs-lite/procfs\nhttps://youtu.be/tGseJW_uBB8\nhttps://youtu.be/y1PaBzxwRWQ\n","enisa_id":"EUVD-2025-37938\n","assigner":"GitHub_M","epss":0.27,"dataProcessed":"Nov 6, 2026, 7:20:53 AM","vulnerabilityProduct":[{"id":"2d79b72a-ea3e-39a4-b7b7-e2efc3208925","product":{"name":"youki","vendor":{"name":"youki-dev"}},"product_version":"\u003c 0.5.7"}],"vulnerabilityVendor":[{"id":"59a76427-7edd-3b1a-983d-52a992dd3365","vendor":{"name":"youki-dev"}}]}},{"id":"bb0e16c5-43e6-320e-aad4-86beb1c2ead5","vulnerability":{"id":"GHSA-vf95-55w6-qmrf","description":"youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects","datePublished":"Nov 5, 2025, 6:45:18 PM","dateUpdated":"Nov 15, 2025, 2:25:28 AM","baseScore":0.0,"references":"https://github.com/opencontainers/runc/security/advisories/GHSA-cgrx-mc8f-2prm\nhttps://github.com/youki-dev/youki/security/advisories/GHSA-vf95-55w6-qmrf\nhttps://nvd.nist.gov/vuln/detail/CVE-2025-62596\nhttps://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a\nhttps://github.com/youki-dev/youki\nhttps://pkg.go.dev/github.com/cyphar/filepath-securejoin/pathrs-lite/procfs\nhttps://youtu.be/tGseJW_uBB8\nhttps://youtu.be/y1PaBzxwRWQ\n","enisa_id":"EUVD-2025-37938\n","aliases":"GHSA-vf95-55w6-qmrf\nCVE-2025-62596\n","epss":0.0,"dataProcessed":"Nov 1, 2026, 1:56:19 AM","vulnerabilityProduct":[],"vulnerabilityVendor":[]}}],"enisaIdAdvisory":[]}