CVE-2021-25741

Symlink Exchange Can Allow Host Filesystem Access

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Affected

Kubernetes

CVSS v3.1 NVD

8.1 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CVSS v3.1 LIGGITT

8.8 HIGHCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

CVSS v2.0 NVD

5.5 MEDIUMAV:N/AC:L/Au:S/C:P/I:P/A:N

EPSS

7.96% chance of exploitation in the next 30 days, 95th percentile

Published

2021-09-20

Updated

2024-09-16

Proof-of-concept exploits (4)

• Betep0k/CVE-2021-2574130★ · 2022-01-19
• brant-ruan/poc-demo2★ · 2022-12-20
• cdxiaodong/CVE-2021-257410★ · 2023-10-19
• Glutenfree69/ZigRaceExploit0★ · 2026-03-17

Security advisories

• kubernetes/kubernetes/issues/104980
• https://security.netapp.com/advisory/ntap-20211008-0006
• advisories/GHSA-f5f7-6478-qm6p
• https://groups.google.com/g/kubernetes-security-announce/c/nyfdhK24H7s

References

• CVE Record
• NVD entry

Related

• CVE-2022-0847
• CVE-2022-23648
• CVE-2021-4034
• CVE-2024-21626