{"action":"Upgrade github.com/opencontainers/runc to 1.2.8 or later.","affected":[{"fixed":"1.2.8","introduced":"1.0.0-rc3"},{"fixed":"1.3.3","introduced":"1.3.0-rc.1"},{"fixed":"1.4.0-rc.3","introduced":"1.4.0-rc.1"}],"component":"github.com/opencontainers/runc","cve_ids":["CVE-2025-52565"],"ecosystem":"Go","epss":0.00811,"exploited":false,"fixed_versions":["1.2.8","1.3.3","1.4.0-rc.3"],"ghsa_id":"GHSA-qw9x-cqr3-wc7r","id":"tcs_01M5KGBEJX6B5YYS18D9863K9J","modified_at":"2026-02-04T03:00:55.376695Z","published_at":"2025-11-18T15:44:15Z","references":["https://osv.dev/vulnerability/GO-2025-4097","https://github.com/opencontainers/runc/security/advisories/GHSA-qw9x-cqr3-wc7r","https://github.com/opencontainers/runc/commit/01de9d65dc72f67b256ef03f9bfb795a2bf143b4","https://github.com/opencontainers/runc/commit/398955bccb7f20565c224a3064d331c19e422398","https://github.com/opencontainers/runc/commit/531ef794e4ecd628006a865ad334a048ee2b4b2e","https://github.com/opencontainers/runc/commit/9be1dbf4ac67d9840a043ebd2df5c68f36705d1d","https://github.com/opencontainers/runc/commit/aee7d3fe355dd02939d44155e308ea0052e0d53a","https://github.com/opencontainers/runc/commit/db19bbed5348847da433faa9d69e9f90192bfa64","https://github.com/opencontainers/runc/commit/de87203e625cd7a27141fb5f2ad00a320c69c5e8","https://github.com/opencontainers/runc/commit/ff94f9991bd32076c871ef0ad8bc1b763458e480"],"severity":{"label":"high","score":7.5},"sources":[{"source":"osv","source_id":"GO-2025-4097","url":"https://osv.dev/vulnerability/GO-2025-4097"},{"source":"nvd","source_id":"CVE-2025-52565","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-52565"}],"summary":"Container escape with malicious config due to /dev/console mount and related races in github.com/opencontainers/runc"}