CVE-2025-0750

Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting

Published Jan 28, 2025 CVSS 3.1 · 6.6 Medium EPSS < 1% KEV · Not listed
Description
A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

Source ID Title
EUVD EUVD EUVD-2025-0171 A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Github GHSA Github GHSA GHSA-hp5j-2585-qx6g CRI-O Path Traversal vulnerability
History
Type Values Removed Values Added
First Time appeared Redhat openshift Ironic
CPEs cpe:/a:redhat:openshift:4.18::el8
cpe:/a:redhat:openshift:4.18::el9
cpe:/a:redhat:openshift_ironic:4.18::el9
Vendors & Products Redhat openshift Ironic
References
Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift:4.17::el8
cpe:/a:redhat:openshift:4.17::el9
References
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Type Values Removed Values Added
Title cri-o: CRI-O Path Traversal in Log Handling Functions Allows Arbitrary Unmounting Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting
First Time appeared Redhat
Redhat openshift
CPEs cpe:/a:redhat:openshift:4
Vendors & Products Redhat
Redhat openshift
References
Type Values Removed Values Added
Description A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.
Title cri-o: CRI-O Path Traversal in Log Handling Functions Allows Arbitrary Unmounting
Weaknesses CWE-22
References
Metrics threat_severity

None

cvssV3_1

{'score': 6.6, 'vector': 'CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:L/I:L/A:H'}

threat_severity

Moderate

Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Oct 30, 2026, 6:13 PM
Reserved
Jan 27, 2025, 1:53 PM
Status
Deferred
Published
Jan 28, 2025, 10:15 AM
Modified
Oct 30, 2026, 7:17 PM
Severity
Moderate
Public date
Jan 22, 2025, 12:00 AM