cve.bz

CVE-2021-25741

8.1 highEPSS 8.0%

High (8.1) in kubernetes kubernetes. EPSS 8.0% chance of exploitation in the next 30 days. Fixed in k8s.io/kubernetes 1.19.15, 1.20.11, 1.21.5.

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Severity

CVSS 3.1

8.1 high
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
EPSS
8.0% chance of exploitation in the next 30 days; higher than 94% of CVEs (scores of 2026-10-31)
CWEs
CWE-552, CWE-20
Published
Modified
Record from
the NVD, synced

Affected

Packages (OSV)

AdvisoryEcosystemPackageAffectedFixed in
GHSA-f5f7-6478-qm6pGok8s.io/kubernetes<1.19.151.19.15
GHSA-f5f7-6478-qm6pGok8s.io/kubernetes>=1.20.0 <1.20.111.20.11
GHSA-f5f7-6478-qm6pGok8s.io/kubernetes>=1.21.0 <1.21.51.21.5
GHSA-f5f7-6478-qm6pGok8s.io/kubernetes>=1.22.0 <1.22.21.22.2
GO-2022-0910Gok8s.io/kubernetes<1.19.15
>=1.20.0 <1.20.11
>=1.21.0 <1.21.5
>=1.22.0 <1.22.2		1.19.15, 1.20.11, 1.21.5, 1.22.2

References

Check your stackJSON