Vulnerability · Published Nov 5, 2025 · Assigned by GitHub_M

CVE-2025-62596youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects

High 7.3

In plain English

A high-severity security flaw in youki from youki-dev. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 19% of all known vulnerabilities).

Severity (CVSS 4.0)7.3High

Exploit odds (30 days)0.3%top 81.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

Youki is a container runtime written in Rust. In versions 0.5.6 and below, youki’s apparmor handling performs insufficiently strict write-target validation, and when combined with path substitution during pathname resolution, can allow writes to unintended procfs locations. While resolving a path component-by-component, a shared-mount race can substitute intermediate components and redirect the final target. This issue is fixed in version 0.5.7.

Affected products (as reported)

Vendor	Product	Versions
youki-dev	youki	< 0.5.7

Weakness: CWE-61, CWE-363 · Vector: CVSS:4.0/AV:L/AC:L/AT:P/PR:L/UI:A/VC:H/VI:H/VA:H/SC:H/SI:H/SA:H

References

https://github.com/youki-dev/youki/security/advisories/GHSA-vf95-55w6-qmrf x_refsource_CONFIRM
https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a x_refsource_MISC
https://pkg.go.dev/github.com/cyphar/filepath-securejoin/pathrs-lite/procfs x_refsource_MISC
https://youtu.be/tGseJW_uBB8 x_refsource_MISC
https://youtu.be/y1PaBzxwRWQ x_refsource_MISC