Database/Container, Kubernetes & orchestration
gVisor: runsc mishandles file access permissions, letting unprivileged users read restricted files
CVE-2025-2713Container, Kubernetes & orchestrationcurated
Impact
runsc mishandles file access permissions, letting unprivileged users read restricted files; local privilege escalation
Who can reach it
Any tenant workload inside the sandbox
What to do
Upgrade runsc; restart sandboxed pods
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.