CVE-2025-52565
HighAdvisory
Published 5 Nov 2025In the index since 5 Sept 2026
- Severity
- High
- worst across findings
- CVSS
- 7.5
- base score, highest
- EPSS
- 0.006
- 45th percentile
- CISA KEV
- Not listed
- no confirmed exploitation
- Charts affected
- 289
- of 17,781 indexed, latest versions
- Container images
- 224
- deployed by those charts
- Fix available
- 1 of 2
- affected packages
runc container escape with malicious config due to /dev/console mount and related races
Carried by container images the latest versions of 289 of 17,781 indexed charts deploy, on 224 images.
| Affected package | Affected versions | Fixed in | Images |
|---|---|---|---|
| runcdeb | 1.1.5+ds1-1+deb12u1 | no fix listed | 9 |
| github.com/ | v1.0.0-rc6.0.20190115182101-c1e454b2a1bf, v1.0.0-rc8, v1.0.0-rc8.0.20190926150303-84373aaa560b, v1.0.0-rc9+29 more | 1.2.8 | 215 |
- OSV records
- DEBIAN-CVE-2025-52565GHSA-qw9x-cqr3-wc7r
- Also known as
- GO-2025-4097
Charts affected
289 by stars
Container images carrying it
224 by charts deploying them
A fixed version is listed for 1 of the 2 affected packages.
| Container image | Digest | Package | Fixed in | Used by |
|---|---|---|---|---|
| hiversh/ | b0b85f8942c7 | runc | no fix listed | 1 |
| hiversh/ | 50c07b84f298 | runc | no fix listed | 1 |
| hiversh/ | 836a37641941 | runc | no fix listed | 1 |
| hiversh/ | 958b7ebb4eb4 | runc | no fix listed | 1 |
| hiversh/ | 63a5ae179a9f | runc | no fix listed | 1 |
| hyperledger/ | bf4995c86af6 | github.com/ | 1.2.8 | 1 |
| istio/ | 6cfce8a071b9 | github.com/ | 1.2.8 | 1 |
| kfirfer/ | c257c1e0e8b9 | github.com/ | 1.2.8 | 1 |
| kubebb/ | 067673df26a6 | github.com/ | 1.2.8 | 1 |
| kubeedge/ | 460c6061b608 | github.com/ | 1.2.8 | 1 |
| kusionstack/ | d2f72ae1d2f2 | github.com/ | 1.2.8 | 1 |
| kusionstack/ | c28bd96b986b | github.com/ | 1.2.8 | 1 |
| library/ | 1d148deae16a | github.com/ | 1.2.8 | 1 |
| library/ | 3153fa63f546 | github.com/ | 1.2.8 | 1 |
| library/ | aa3df78ecf32 | github.com/ | 1.2.8 | 1 |
| library/ | afa5d5134900 | github.com/ | 1.2.8 | 1 |
| library/ | d9a0fd8bdd15 | github.com/ | 1.2.8 | 1 |
| library/ | dd43b430341a | github.com/ | 1.2.8 | 1 |
| library/ | 83f7bf209844 | github.com/ | 1.2.8 | 1 |
| library/ | 07e06f2e7ae9 | github.com/ | 1.2.8 | 1 |
| library/ | 1c33370a599c | github.com/ | 1.2.8 | 1 |
| library/ | 490f01279be1 | github.com/ | 1.2.8 | 1 |
| library/ | 9a48ac9f196f | github.com/ | 1.2.8 | 1 |
| library/ | bfc25a68e113 | github.com/ | 1.2.8 | 1 |
| library/ | e22328f4d714 | github.com/ | 1.2.8 | 1 |
| library/ | fbb8456ebdb1 | github.com/ | 1.2.8 | 1 |
| library/ | 50cae5081ab4 | github.com/ | 1.2.8 | 1 |
| library/ | 646902910d6a | github.com/ | 1.2.8 | 1 |
| library/ | 699d652ed674 | github.com/ | 1.2.8 | 1 |
| library/ | 7c81758cb295 | github.com/ | 1.2.8 | 1 |
| library/ | d23ec07162ca | github.com/ | 1.2.8 | 1 |
| library/ | 3c1aab708f6e | github.com/ | 1.2.8 | 1 |
| library/ | 03652c675ae1 | github.com/ | 1.2.8 | 1 |
| library/ | 2d1e636f0778 | github.com/ | 1.2.8 | 1 |
| library/ | 5c265bf1fd30 | github.com/ | 1.2.8 | 1 |
| library/ | 8775adb39f0d | github.com/ | 1.2.8 | 1 |
| library/ | ced3ba927f4c | github.com/ | 1.2.8 | 1 |
| library/ | f565573d74ae | github.com/ | 1.2.8 | 1 |
| library/ | 091a7b5de688 | github.com/ | 1.2.8 | 1 |
| library/ | 507a3eecf809 | github.com/ | 1.2.8 | 1 |
| librenms/ | 4f1f3d667cc7 | github.com/ | 1.2.8 | 1 |
| linuxserver/ | 45c5fe102ff3 | github.com/ | 1.2.8 | 1 |
| mesosphere/ | f9b769c65e24 | github.com/ | 1.2.8 | 1 |
| milvusdb/ | 102aac62827b | github.com/ | 1.2.8 | 1 |
| moby/ | c2aeafaed434 | github.com/ | 1.2.8 | 1 |
| openkruise/ | 0482722b4e56 | github.com/ | 1.2.8 | 1 |
| oryd/ | 8f15006a080d | github.com/ | 1.2.8 | 1 |
| otel/ | 37fa87091cfa | github.com/ | 1.2.8 | 1 |
| otel/ | 5ac3e0ba2b0b | github.com/ | 1.2.8 | 1 |
| otel/ | 71fcef33ae71 | github.com/ | 1.2.8 | 1 |