CVE-2025-54867: Youki: If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.

August 14, 2025

If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.

References

github.com/advisories/GHSA-j26p-6wx7-f3pw
github.com/youki-dev/youki
github.com/youki-dev/youki/commit/0d9b4f2aa5ceaf988f3eb568711d2acf0a4ace37
github.com/youki-dev/youki/releases/tag/v0.5.5
github.com/youki-dev/youki/security/advisories/GHSA-j26p-6wx7-f3pw
nvd.nist.gov/vuln/detail/CVE-2025-54867

Code Behaviors & Features

Detect and mitigate CVE-2025-54867 with GitLab Dependency Scanning

Secure your software supply chain by verifying that all open source dependencies used in your projects contain no disclosed vulnerabilities. Dependency Scanning using SBOM also detects vulnerabilities from proprietary advisories that this site does not include. Learn more about Dependency Scanning using SBOM →