Skip to content
CVE PROGRAM SOURCE RECORD7.8 High

CVE-2021-25749

runAsNonRoot logic bypass for Windows containers

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
kubernetes

Description

Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Kubernetes Kubernetes

  • kubelet v1.22.0 - v1.22.13 to < v1.22.14affected
  • kubelet v1.23.0 - v1.23.10 to < v1.23.11affected
  • kubelet v1.24.0 - v1.24.4 to < v1.24.5affected

References