CVE-2025-53945

See a problem?
Please try reporting it to the source first.
Source
https://cve.org/CVERecord?id=CVE-2025-53945
Import Source
https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53945.json
JSON Data
https://api.osv.dev/v1/vulns/CVE-2025-53945
Aliases
Downstream
Related
Published
2025-07-18T15:35:17.325Z
Modified
2026-04-10T05:31:01.567309Z
Severity
  • 7.0 (High) CVSS_V3 - CVSS:3.1/AV:L/AC:H/PR:L/UI:N/S:C/C:H/I:L/A:L CVSS Calculator
Summary
apko has incorrect permission (0666) in /etc/ld.so.cache and other files
Details

apko allows users to build and publish OCI container images built from apk packages. Starting in version 0.27.0 and prior to version 0.29.5, critical files were inadvertently set to 0666, which could likely be abused for root escalation. Version 0.29.5 contains a fix for the issue.

Database specific 
{
    "cna_assigner": "GitHub_M",
    "cwe_ids": [
        "CWE-276"
    ],
    "osv_generated_from": "https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/53xxx/CVE-2025-53945.json"
}
References

Affected packages

Git / github.com/chainguard-dev/apko

Affected ranges

Type
GIT
Repo
https://github.com/chainguard-dev/apko
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
04f37e2d50d5a502e155788561fb7d40de705bd9
Type
GIT
Repo
https://github.com/chainguard-dev/apko
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
aedb0772d6bf6e74d8f17690946dbc791d0f6af3
Type
GIT
Repo
https://github.com/chainguard-dev/apko
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
61a72971841931d7724fa6b6967e25e32446d371
Type
GIT
Repo
https://github.com/chainguard-dev/apko
Events
Introduced
0 Unknown introduced commit / All previous commits are affected
Fixed
aedb0772d6bf6e74d8f17690946dbc791d0f6af3

Affected versions

0.*
0.27.8
v0.*
v0.1
v0.1.1
v0.1.2
v0.10.0
v0.11.0
v0.11.1
v0.11.2
v0.11.3
v0.12.0
v0.13.0
v0.13.1
v0.13.2
v0.13.3
v0.14.0
v0.14.1
v0.14.2
v0.14.3
v0.14.4
v0.14.5
v0.14.6
v0.14.7
v0.14.8
v0.14.9
v0.15.0
v0.16.0
v0.17.0
v0.18.0
v0.18.1
v0.19.0
v0.19.1
v0.19.2
v0.19.3
v0.19.4
v0.19.5
v0.19.6
v0.19.7
v0.19.8
v0.19.9
v0.2.0
v0.2.1
v0.2.2
v0.20.0
v0.20.1
v0.20.2
v0.21.0
v0.22.1
v0.22.2
v0.22.3
v0.22.4
v0.22.5
v0.22.6
v0.22.7
v0.23.0
v0.24.0
v0.25.0
v0.25.1
v0.25.2
v0.25.3
v0.25.4
v0.25.5
v0.25.6
v0.25.7
v0.26.0
v0.26.1
v0.27.0
v0.27.1
v0.27.2
v0.27.3
v0.27.4
v0.27.5
v0.27.6
v0.27.7
v0.27.9
v0.28.0
v0.29.0
v0.29.1
v0.29.2
v0.29.3
v0.29.4
v0.3.0
v0.3.1
v0.3.2
v0.3.3
v0.4.0
v0.5.0
v0.6.0
v0.7.0
v0.7.1
v0.7.2
v0.7.3
v0.8.0
v0.9.0

Database specific

source 
"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-53945.json"