CVE-2025-0750

Summary

CVE-2025-0750 is a newly discovered vulnerability affecting CRI-O, an open-source container runtime for Kubernetes. The issue lies within the log management functions, UnMountPodLogs and LinkContainerLogs. An attacker with the ability to create and delete Pods can exploit this path traversal weakness, potentially unmounting arbitrary host paths. This denial-of-service vulnerability targets critical system directories, leading to node-level disruptions. By unmounting essential files, an attacker can hinder the normal functioning of the Kubernetes node.

Prevent cyber attacks with Recorded Future by prioritizing and patching critical vulnerabilities being exploited by threat actors targeting your industry. Book your demo to learn more.