1. Home
  2. CVE Database
  3. CVE-2025-54867
HIGH · 7.0

CVE-2025-54867

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. ...

Vulnerability Description

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5.

CVSS Score

7.0

HIGH

CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack Vector
LOCAL
Attack Complexity
HIGH
Privileges Required
LOW
User Interaction
NONE
Scope
UNCHANGED
Confidentiality
HIGH
Integrity
HIGH
Availability
HIGH

Affected Products

VendorProductVersions
Youki-DevYouki< 0.5.5

Related Weaknesses (CWE)

CWE-61

References

FAQ

What is CVE-2025-54867?

CVE-2025-54867 is a vulnerability with a CVSS score of 7.0 (HIGH). Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. ...

How severe is CVE-2025-54867?

CVE-2025-54867 has been rated HIGH with a CVSS base score of 7.0/10. Review the CVSS metrics above for detailed severity breakdown.

Is there a patch for CVE-2025-54867?

Check the references section above for vendor advisories and patch information. Affected products include: Youki-Dev Youki.