Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
cve-program · CVE-2025-0750
PublishedA vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Read the publisher's advisoryeuvd · EUVD-2025-0171
PublishedA vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Read the publisher's advisorynvd · CVE-2025-0750
PublishedA vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Read the publisher's advisoryosv · GHSA-hp5j-2585-qx6g
PublishedA vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Read the publisher's advisoryosv · GO-2025-3426
PublishedCRI-O Path Traversal vulnerability in github.com/cri-o/cri-o
Read the publisher's advisoryAffected versions, risk and source history
Related advisories and sources
Publishers link these advisories through the identifiers shown below. A shared identifier or date alone does not tell you whether your software is affected or whether the advisories describe the same cause.
CVE-2025-0750 · CVE overview and exploitation status
cve-program · CVE-2025-0750
- https://access.redhat.com/errata/RHEA-2024:6126
- https://access.redhat.com/errata/RHSA-2025:1122
- https://access.redhat.com/security/cve/CVE-2025-0750
- https://bugzilla.redhat.com/show_bug.cgi?id=2339405
euvd · EUVD-2025-0171
- https://access.redhat.com/errata/RHEA-2024:6126
- https://access.redhat.com/errata/RHSA-2025:1122
- https://access.redhat.com/security/cve/CVE-2025-0750
- https://bugzilla.redhat.com/show_bug.cgi?id=2339405
nvd · CVE-2025-0750
- https://access.redhat.com/errata/RHEA-2024:6126
- https://access.redhat.com/errata/RHSA-2025:1122
- https://access.redhat.com/security/cve/CVE-2025-0750
- https://bugzilla.redhat.com/show_bug.cgi?id=2339405
osv · GHSA-hp5j-2585-qx6g
- https://nvd.nist.gov/vuln/detail/CVE-2025-0750
- https://access.redhat.com/errata/RHSA-2025:1122
- https://access.redhat.com/security/cve/CVE-2025-0750
- https://bugzilla.redhat.com/show_bug.cgi?id=2339405
- https://github.com/cri-o/cri-o
osv · GO-2025-3426
Related changes
Linked by CVE identifier- A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to n… · Advisory content revised · 9 Nov 2026
- A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to n… · Advisory content revised · 5 Nov 2026
- A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to n… · Advisory content revised · 31 Oct 2026
- A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to n… · Advisory content revised · 31 Oct 2026
- Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting · Affected-version evidence changed · 30 Oct 2026