QwikSec

Security Database

CVE

CWE

Training

CVE-2025-62161

Published: Nov 5, 2025

Modified: Nov 6, 2025

PUBLISHED

Description

Youki is a container runtime written in Rust. In versions 0.5.6 and below, the initial validation of the source /dev/null is insufficient, allowing container escape when youki utilizes bind mounting the container's /dev/null as a file mask. This issue is fixed in version 0.5.7.

Vendor	Product	Versions
youki-dev	youki	affected `< 0.5.7`

Weaknesses (CWE)

References

https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8

x_refsource_CONFIRM

https://github.com/youki-dev/youki/security/advisories/GHSA-4g74-7cff-xcv8

x_refsource_MISC

https://github.com/youki-dev/youki/commit/5886c91073b9be748bd8d5aed49c4a820548030a

x_refsource_MISC

Security Training

Train your team to recognize and prevent security threats with our comprehensive security awareness program.

Vulnerability Scanning

Discover vulnerabilities in your applications and infrastructure before attackers do.