cvedb.io
CVE-2025-54867
HIGH · CVSS 7
EPSS exploitation probability: 0%
Published 2025-08-14T16:15:39.933 · Last modified 2026-06-17T09:40:49.940

Summary

Youki is a container runtime written in Rust. Prior to version 0.5.5, if /proc and /sys in the rootfs are symbolic links, they can potentially be exploited to gain access to the host root filesystem. This issue has been patched in version 0.5.5.

Affected products

youki-dev — youki

Does this affect you?

Add your gear to cvedb and we'll alert you only when youki-dev ships something exploited.

Check my exposure →

References

This product uses data from the NVD API but is not endorsed or certified by the NVD. Informational only; not professional security advice.