Junglewise Threat Intelligence

CVE-2025-62161: youki container escape via "masked path" abuse due to mount race conditions

CVE-2025-62161 · Severity: low · CVSS 3.1 · Published 2025-11-05

Technologies: youki (crates.io). Vendors: crates.io.

Executive brief

youki container escape via "masked path" abuse due to mount race conditions

Affected products

crates.io youki

Related threats

youki container escape and denial of service due to arbitrary write gadgets and procfs write redirects
Youki: If /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem.