CVE-2021-25741

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2021-25741
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25741.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2021-25741
Aliases
Downstream
Related
Published
2021-09-20T17:15:08.343Z
Modified
2026-07-09T00:13:02.969241Z
Severity
  • 8.1 (High) CVSS_V3 - CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N CVSS Calculator
Summary
[none]
Details

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

References

Affected packages

Git / github.com/kubernetes/kubelet

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubelet
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
be67f1bbc192a7d4993c16809ee6d923ce59cb2f
Introduced
30b4cd52c54df86ed93459ba84b3e61877fc28ea
Last affected
200af98d7e281e6dca0d79168a52cbdc1b434957
Introduced
2f96697a6b8649844ec80a9bbe6d7cde3b197f5b
Last affected
e58dbfbf5a665705736cae9c5fe2fb4895aca2ef
Introduced
cb25f113ccf051d34612b05d6c04c1f892167b0c
Last affected
8f730ee1186d7f2af4af2041696c66f89c287af2
Database specific 
{
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.19.14"
        },
        {
            "introduced": "1.20.0"
        },
        {
            "last_affected": "1.20.10"
        },
        {
            "introduced": "1.21.0"
        },
        {
            "last_affected": "1.21.4"
        },
        {
            "introduced": "1.22.0"
        },
        {
            "last_affected": "1.22.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

kubernetes-1.*
kubernetes-1.10.0-alpha.0
kubernetes-1.10.0-alpha.1
kubernetes-1.10.0-alpha.2
kubernetes-1.10.0-alpha.3
kubernetes-1.11.0-alpha.0
kubernetes-1.11.0-alpha.1
kubernetes-1.11.0-alpha.2
kubernetes-1.12.0-alpha.0
kubernetes-1.12.0-alpha.1
kubernetes-1.12.0-beta.0
kubernetes-1.13.0-alpha.0
kubernetes-1.19.14
kubernetes-1.20.10
kubernetes-1.21.4
kubernetes-1.22.1
kubernetes-1.9.0-alpha.0
kubernetes-1.9.0-alpha.1
kubernetes-1.9.0-alpha.2
kubernetes-1.9.0-alpha.3
v0.*
v0.19.14
v0.20.10
v0.21.4
v0.22.1

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25741.json"

Git / github.com/kubernetes/kubernetes

Affected ranges

Type
GIT
Repo
https://github.com/kubernetes/kubernetes
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Last affected
0fd2b5afdfe3134d6e1531365fdb37dd11f54d1c
Introduced
af46c47ce925f4c4ad5cc8d1fca46c7b77d13b38
Last affected
8152330a2b6ca3621196e62966ef761b8f5a61bb
Introduced
cb303e613a121a29364f75cc67d3d580833a7479
Last affected
3cce4a82b44f032d0cd1a1790e6d2f5a55d20aae
Introduced
c2b5237ccd9c0f1d600d3072634ca66cefdf272f
Last affected
632ed300f2c34f6d6d15ca4cef3d3c7073412212
Database specific 
{
    "cpe": "cpe:2.3:a:kubernetes:kubernetes:*:*:*:*:*:*:*:*",
    "extracted_events": [
        {
            "introduced": "0"
        },
        {
            "last_affected": "1.19.14"
        },
        {
            "introduced": "1.20.0"
        },
        {
            "last_affected": "1.20.10"
        },
        {
            "introduced": "1.21.0"
        },
        {
            "last_affected": "1.21.4"
        },
        {
            "introduced": "1.22.0"
        },
        {
            "last_affected": "1.22.1"
        }
    ],
    "source": "CPE_RANGE"
}

Affected versions

v0.*
v0.13.1-dev
v0.17.0
v1.*
v1.1.0-alpha.0
v1.1.0-alpha.1
v1.10.0-alpha.0
v1.10.0-alpha.1
v1.10.0-alpha.2
v1.10.0-alpha.3
v1.11.0-alpha.0
v1.11.0-alpha.1
v1.11.0-alpha.2
v1.12.0-alpha.0
v1.12.0-alpha.1
v1.13.0-alpha.0
v1.13.0-alpha.1
v1.13.0-alpha.2
v1.13.0-alpha.3
v1.14.0-alpha.0
v1.14.0-alpha.1
v1.14.0-alpha.2
v1.14.0-alpha.3
v1.15.0-alpha.0
v1.15.0-alpha.1
v1.15.0-alpha.2
v1.15.0-alpha.3
v1.16.0-alpha.0
v1.16.0-alpha.1
v1.16.0-alpha.2
v1.16.0-alpha.3
v1.17.0-alpha.0
v1.17.0-alpha.1
v1.17.0-alpha.2
v1.17.0-alpha.3
v1.18.0-alpha.0
v1.18.0-alpha.1
v1.18.0-alpha.2
v1.18.0-alpha.4
v1.18.0-alpha.5
v1.19.0
v1.19.0-alpha.0
v1.19.0-alpha.1
v1.19.0-alpha.2
v1.19.0-alpha.3
v1.19.0-beta.0
v1.19.0-beta.1
v1.19.0-beta.2
v1.19.0-rc.0
v1.19.0-rc.1
v1.19.0-rc.2
v1.19.0-rc.3
v1.19.0-rc.4
v1.19.1
v1.19.1-rc.0
v1.19.10
v1.19.10-rc.0
v1.19.11
v1.19.11-rc.0
v1.19.12
v1.19.12-rc.0
v1.19.13
v1.19.13-rc.0
v1.19.14
v1.19.14-rc.0
v1.19.2
v1.19.2-rc.0
v1.19.3
v1.19.3-rc.0
v1.19.4
v1.19.4-rc.0
v1.19.5
v1.19.5-rc.0
v1.19.6
v1.19.6-rc.0
v1.19.6-rc.1
v1.19.7
v1.19.7-rc.0
v1.19.8
v1.19.8-rc.0
v1.19.9
v1.19.9-rc.0
v1.2.0-alpha.1
v1.2.0-alpha.2
v1.2.0-alpha.3
v1.2.0-alpha.4
v1.2.0-alpha.5
v1.2.0-alpha.6
v1.2.0-alpha.7
v1.2.0-alpha.8
v1.20.0
v1.20.0-alpha.0
v1.20.1
v1.20.1-rc.0
v1.20.1-rc.1
v1.20.10
v1.20.10-rc.0
v1.20.2
v1.20.2-rc.0
v1.20.3
v1.20.3-rc.0
v1.20.4
v1.20.4-rc.0
v1.20.5
v1.20.5-rc.0
v1.20.6
v1.20.6-rc.0
v1.20.7
v1.20.7-rc.0
v1.20.8
v1.20.8-rc.0
v1.20.9
v1.20.9-rc.0
v1.21.0
v1.21.1
v1.21.1-rc.0
v1.21.2
v1.21.2-rc.0
v1.21.3
v1.21.3-rc.0
v1.21.4
v1.21.4-rc.0
v1.22.0
v1.22.1
v1.22.1-rc.0
v1.3.0-alpha.0
v1.3.0-alpha.1
v1.3.0-alpha.2
v1.3.0-alpha.3
v1.3.0-alpha.4
v1.3.0-alpha.5
v1.4.0-alpha.1
v1.4.0-alpha.2
v1.4.0-alpha.3
v1.5.0-alpha.0
v1.5.0-alpha.1
v1.5.0-alpha.2
v1.6.0-alpha.0
v1.6.0-alpha.1
v1.6.0-alpha.2
v1.6.0-alpha.3
v1.7.0-alpha.0
v1.7.0-alpha.1
v1.7.0-alpha.2
v1.7.0-alpha.3
v1.7.0-alpha.4
v1.8.0-alpha.0
v1.8.0-alpha.1
v1.8.0-alpha.2
v1.8.0-alpha.3
v1.9.0-alpha.0
v1.9.0-alpha.1
v1.9.0-alpha.2
v1.9.0-alpha.3

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2021-25741.json"