Skip to content
Heist/ feed
Back to feed
High

youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

Type: advisorySources: OSV

Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path component-by-component, a shared-mount race can substitute intermediate components and redirect the final target. This issue is fixed in version 0.5.7.

Products
Not specified
Affected versions
Not specified
Fixed versions
Not specified
CVEs
CVE-2025-62596
Confirmed fixed CVEs
Not specified
Updated in this feed
3 Nov 2026, 10:09 UTC · Revision 1

Source evidence

youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

core-osv · Original source

Published 5 Nov 2025, 23:14 UTC

Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path component-by-component, a shared-mount race can substitute intermediate components and redirect the final target. This issue is fixed in version 0.5.7.

osv:CVE-2025-62596
Complete source record
{
  "id": "a4b1f35417a640b086cdda0c2ad5bc5372d2c372daa98d7211900602be145aa0",
  "url": "https://osv.dev/vulnerability/CVE-2025-62596",
  "method": "structured",
  "payload": {
    "kind": "advisory",
    "title": "youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects",
    "summary": "Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path component-by-component, a shared-mount race can substitute intermediate components and redirect the final target. This issue is fixed in version 0.5.7.",
    "evidence": "osv:CVE-2025-62596",
    "products": [],
    "severity": "high",
    "structured": {
      "id": "CVE-2025-62596",
      "aliases": [
        "CVE-2025-62596",
        "GHSA-vf95-55w6-qmrf"
      ],
      "metrics": [
        {
          "type": "CVSS_V4",
          "score": "CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H"
        }
      ],
      "affected": [
        {
          "ranges": [
            {
              "repo": "https://github.com/youki-dev/youki",
              "type": "GIT",
              "events": [
                {
                  "introduced": "0"
                },
                {
                  "fixed": "bd54457ba9de1629f21fe678687f433aec63e7c7"
                },
                {
                  "fixed": "5886c91073b9be748bd8d5aed49c4a820548030a"
                }
              ],
              "database_specific": {
                "extracted_events": [
                  {
                    "cpe": "cpe:2.3:a:youki-dev:youki:*:*:*:*:*:rust:*:*",
                    "range": [
                      {
                        "introduced": "0"
                      },
                      {
                        "fixed": "0.5.7"
                      }
                    ],
                    "source": "CPE_RANGE"
                  },
                  {
                    "range": [
                      {
                        "fixed": "5886c91073b9be748bd8d5aed49c4a820548030a"
                      }
                    ],
                    "source": "REFERENCES_COMMIT"
                  }
                ]
              }
            }
          ],
          "versions": [
            "v0.5.6",
            "v0.5.5",
            "v0.5.4",
            "v0.5.0",
            "v0.5.3",
            "v0.5.2",
            "v0.5.1",
            "v0.4.1",
            "v0.4.0",
            "v0.3.3",
            "v0.3.2",
            "v0.3.1",
            "v0.3.0",
            "v0.2.0",
            "v0.1.0",
            "v0.0.5",
            "v0.0.4",
            "v0.0.3",
            "v0.0.2",
            "v0.0.1"
          ],
          "database_specific": {
            "source": "https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-62596.json"
          }
        }
      ],
      "modified": "2026-10-28T02:30:27.624508439Z",
      "provider": "osv",
      "references": [
        "https://pkg.go.dev/github.com/cyphar/filepath-securejoin/pathrs-lite/procfs",
        "https://youtu.be/tGseJW_uBB8",
        "https://youtu.be/y1PaBzxwRWQ",
        "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62596.json",
        "https://github.com/youki-dev/youki/security/advisories/GHSA-vf95-55w6-qmrf",
        "https://nvd.nist.gov/vuln/detail/CVE-2025-62596",
        "https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a"
      ],
      "provider_metadata": {
        "cwe_ids": [
          "CWE-363",
          "CWE-61"
        ],
        "cna_assigner": "GitHub_M",
        "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/62xxx/CVE-2025-62596.json"
      }
    },
    "related_cves": [
      {
        "value": "CVE-2025-62596",
        "evidence": "/id"
      }
    ],
    "security_relevant": true,
    "severity_evidence": "/severity/0/score"
  },
  "source_id": "core-osv",
  "document_id": 494402,
  "published_at": "2025-11-05T23:14:37.167+00:00"
}