{"action":"Upgrade github.com/opencontainers/runc to 1.2.8 or later.","affected":[{"fixed":"1.2.8","introduced":"1.0.0-rc3"},{"fixed":"1.3.3","introduced":"1.3.0-rc.1"},{"fixed":"1.4.0-rc.3","introduced":"1.4.0-rc.1"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2025-52565"],"ecosystem":"Go","epss":0.00567,"exploited":false,"fixed_versions":["1.2.8","1.3.3","1.4.0-rc.3"],"ghsa_id":"GHSA-qw9x-cqr3-wc7r","id":"tcs_01M5KFKPAR31MB8DFQBD6NE070","modified_at":"2026-09-10T03:50:58.358973597Z","published_at":"2025-11-05T17:34:49Z","references":["https://osv.dev/vulnerability/GHSA-qw9x-cqr3-wc7r","https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r","https://nvd.nist.gov/vuln/detail/CVE-2025-52565","https://github.com/opencontainers/runc/commit/01de9d65dc72f67b256ef03f9bfb795a2bf143b4","https://github.com/opencontainers/runc/commit/398955bccb7f20565c224a3064d331c19e422398","https://github.com/opencontainers/runc/commit/531ef794e4ecd628006a865ad334a048ee2b4b2e","https://github.com/opencontainers/runc/commit/9be1dbf4ac67d9840a043ebd2df5c68f36705d1d","https://github.com/opencontainers/runc/commit/aee7d3fe355dd02939d44155e308ea0052e0d53a","https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64","https://github.com/opencontainers/runc/commit/de87203e625cd7a27141fb5f2ad00a320c69c5e8","https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480","https://github.com/opencontainers/runc"],"severity":{"label":"high"},"sources":[{"source":"osv","source_id":"GHSA-qw9x-cqr3-wc7r","url":"https://osv.dev/vulnerability/GHSA-qw9x-cqr3-wc7r"}],"summary":"runc container escape with malicious config due to /dev/console mount and related races"}