Skip to content
OpenAdvisories

Product · containers

crun

4 known vulnerabilities.

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

  • High 8.5
    CVE-2025-24965

    .krun_config.json symlink attack creates or overwrites file on the host in crun

    crun is an open source OCI Container Runtime fully written in C. In affected versions A malicious container image could trick the krun handler into escaping the root filesystem, allowing file creation or modification on the host. No special permissions are ne…

    containers crun crun crun Ubuntu Alpine