Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2021-25741

Symlink Exchange Can Allow Host Filesystem Access

Description

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes Kubernetes

  • unspecified to ≤ 1.19.14affected
  • unspecified to ≤ 1.20.10affected
  • unspecified to ≤ 1.21.4affected
  • unspecified to ≤ 1.22.1affected

References