{"id":"GO-2025-4096","revision":"01be0d6908ba44428afa1eff8e2d4a21","records":[{"revision":"01be0d6908ba44428afa1eff8e2d4a21","observedAt":"2026-10-24T13:19:41.952+00:00","statement":{"source":"osv","id":"GO-2025-4096","aliases":["CVE-2025-31133","GHSA-9493-h29p-rfm2"],"title":"Container escape via \"masked path\" abuse due to mount race conditions in github.com/opencontainers/runc","description":"Container escape via \"masked path\" abuse due to mount race conditions in github.com/opencontainers/runc","state":0,"publishedAt":"2025-11-18T15:44:15+00:00","modifiedAt":"2026-02-04T03:11:33.546218+00:00","affected":[{"ecosystem":"Go","name":"github.com/opencontainers/runc","ranges":[{"type":"SEMVER","events":[{"kind":"introduced","version":"0"},{"kind":"fixed","version":"1.2.8"},{"kind":"introduced","version":"1.3.0-rc.1"},{"kind":"fixed","version":"1.3.3"},{"kind":"introduced","version":"1.4.0-rc.1"},{"kind":"fixed","version":"1.4.0-rc.3"}]}],"versions":[],"rawVersionEvidence":null}],"metrics":[],"references":["https://github.com/opencontainers/runc/security/advisories/GHSA-9493-h29p-rfm2","https://github.com/opencontainers/runc/commit/1a30a8f3d921acbbb6a4bb7e99da2c05f8d48522","https://github.com/opencontainers/runc/commit/5d7b2424072449872d1cd0c937f2ca25f418eb66","https://github.com/opencontainers/runc/commit/8476df83b534a2522b878c0507b3491def48db9f","https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64"],"sourceUrl":"https://osv.dev/vulnerability/GO-2025-4096","license":"OSV · upstream source license applies","key":"osv:GO-2025-4096","identifiers":["GO-2025-4096","CVE-2025-31133","GHSA-9493-h29p-rfm2"]},"retained":false,"historicalAffected":[]}],"coverage":[]}