CVE-2025-31133

2 advisories.

Go/github.com/opencontainers/runc CVE-2025-31133: high 7.8, EPSS 0.84%

runc container escape via "masked path" abuse due to mount race conditions

Action: Upgrade github.com/opencontainers/runc to 1.2.8 or later.

go get github.com/opencontainers/runc@v1.2.8

go get github.com/opencontainers/runc@v1.3.3

go get github.com/opencontainers/runc@v1.4.0-rc.3

1.2.8

1.3.3

1.4.0-rc.3

CVE-2025-31133 · published 2025-11-05T16:37:15Z · modified 2026-09-10T03:50:30.785749905Z · JSON

Container escape via "masked path" abuse due to mount race conditions in github.com/opencontainers/runc

Action: Upgrade github.com/opencontainers/runc to 1.2.8 or later.

go get github.com/opencontainers/runc@v1.2.8

go get github.com/opencontainers/runc@v1.3.3

go get github.com/opencontainers/runc@v1.4.0-rc.3

1.2.8

1.3.3

1.4.0-rc.3

CVE-2025-31133 · published 2025-11-18T15:44:15Z · modified 2026-02-04T03:11:33.546218Z · JSON