CVE-2025-0750: Cri-o: cri-o path traversal in log handling functions allows arbitrary unmounting

Severity: medium (CVSS 6.6 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.3% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-01-28 · updated 2026-10-30
Weakness: CWE-22

Description

A vulnerability was found in CRI-O. A path traversal issue in the log management functions (UnMountPodLogs and LinkContainerLogs) may allow an attacker with permissions to create and delete Pods to unmount arbitrary host paths, leading to node-level denial of service by unmounting critical system directories.

Affected products

cri-o: before 1.33.1 — fixed in 1.33.1
Red Hat OpenShift Container Platform 4.18: all versions — fixed in 2:1.33.7-4.rhaos4.18.el9
Red Hat OpenShift Container Platform 4.17: all versions — fixed in 0:1.30.10-3.rhaos4.17.gitd088fcf.el8

How to fix

Upgrade to a fixed version: cri-o 1.33.1; Red Hat OpenShift Container Platform 4.18 2:1.33.7-4.rhaos4.18.el9; Red Hat OpenShift Container Platform 4.17 0:1.30.10-3.rhaos4.17.gitd088fcf.el8. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-0750 or the next vulnerability affects your stack