Every CVE Search/ Get API key

CVE-2021-25741

Symlink Exchange Can Allow Host Filesystem Access

8.8 HighPublic exploitFix available

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Attack profile

How easy it is to exploit

Attack vector
Network
Complexity
Low
Privileges needed
Low
User interaction
None

What an attacker can affect

Confidentiality
High
Integrity
High
Availability
High

Exploit likelihood

7.96%Up 7.3 points since Sep 21, 2021
90%50%10%1%

What each source reports

CVE List Score used 8.8

Symlink Exchange Can Allow Host Filesystem Access

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Record
CVE-2021-25741
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Weakness
CWE-20
Updated
2026-11-02
EUVDEUVD-2021-2339 8.8

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Record
EUVD-2021-2339
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-03
GitHub AdvisoriesGHSA-f5f7-6478-qm6p 8.1

Files or Directories Accessible to External Parties in kubernetes

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Record
GHSA-f5f7-6478-qm6p
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-20, CWE-552
Updated
2026-11-02
NVD 8.8

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Record
CVE-2021-25741
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS 2.0
5.5 MediumAV:N/AC:L/Au:S/C:P/I:P/A:N
Weakness
CWE-20, CWE-552
Updated
2026-11-02
OSV 8.1

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Record
CVE-2021-25741
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVDEBIAN-CVE-2021-25741 8.1

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Record
DEBIAN-CVE-2021-25741
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
Show 8 moreShow less
OSVGHSA-f5f7-6478-qm6p 8.1

Files or Directories Accessible to External Parties in kubernetes

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Record
GHSA-f5f7-6478-qm6p
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Weakness
CWE-20, CWE-552
Updated
2026-11-02
OSVRHSA-2021:3631 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.8.13 security update

Record
RHSA-2021:3631
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3635 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.7.32 packages and security update

Record
RHSA-2021:3635
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3642 8.8

Red Hat Security Advisory: OpenShift Container Platform 4.6.46 security update

Record
RHSA-2021:3642
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVRHSA-2021:3646 8.8

Red Hat Security Advisory: OpenShift Container Platform 3.11.524 security and bug fix update

Record
RHSA-2021:3646
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Updated
2026-11-02
OSVUBUNTU-CVE-2021-25741 8.8

A security issue was discovered in Kubernetes where a user may be able to create a container with subpath volume mounts to access files & directories outside of the volume, including on the host filesystem.

Record
UBUNTU-CVE-2021-25741
CVSS 3.1
8.8 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
CVSS 3.1
8.1 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
Updated
2026-11-02
OSVGO-2022-0910 No score

Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

Files or Directories Accessible to External Parties in kubernetes in k8s.io/kubernetes

Record
GO-2022-0910
Updated
2026-11-02
OSVopenSUSE-SU-2025:15424-1 No score

govulncheck-vulndb-0.0.20250807T150727-1.1 on GA media

These are all security issues fixed in the govulncheck-vulndb-0.0.20250807T150727-1.1 package on the GA media of openSUSE Tumbleweed.

Record
openSUSE-SU-2025:15424-1
Updated
2026-11-02

Affected products

Affected packages

Affected packages
PackageAffectedFixed
k8s.io/kubernetes
Go
 before 1.19.15
1.19.15
k8s.io/kubernetes
Go
 1.20.0 up to 1.20.11
1.20.11
k8s.io/kubernetes
Go
 1.21.0 up to 1.21.5
1.21.5
k8s.io/kubernetes
Go
 1.22.0 up to 1.22.2
1.22.2
kubernetes
Debian:12
 before 1.20.5+really1.20.2-1
1.20.5+really1.20.2-1
kubernetes
Debian:13
 before 1.20.5+really1.20.2-1
1.20.5+really1.20.2-1
kubernetes
Debian:14
 before 1.20.5+really1.20.2-1
1.20.5+really1.20.2-1
k8s.io/kubernetes
Go
 before 1.19.15, 1.20.0 up to 1.20.11, 1.21.0 up to 1.21.5, 1.22.0 up to 1.22.2
1.19.151.20.111.21.51.22.2
openshift
Red Hat:openshift:4.8::el7
 before 0:4.8.0-202109180335.p0.git.a620f50.assembly.stream.el7
0:4.8.0-202109180335.p0.git.a620f50.assembly.stream.el7
openshift-hyperkube
Red Hat:openshift:4.8::el7
 before 0:4.8.0-202109180335.p0.git.a620f50.assembly.stream.el7
0:4.8.0-202109180335.p0.git.a620f50.assembly.stream.el7
Show 24 moreShow less
Affected packages
PackageAffectedFixed
openshift
Red Hat:openshift:4.8::el8
 before 0:4.8.0-202109180335.p0.git.a620f50.assembly.stream.el8
0:4.8.0-202109180335.p0.git.a620f50.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.8::el8
 before 0:4.8.0-202109180335.p0.git.a620f50.assembly.stream.el8
0:4.8.0-202109180335.p0.git.a620f50.assembly.stream.el8
openshift
Red Hat:openshift:4.7::el7
 before 0:4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el7
0:4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el7
openshift-hyperkube
Red Hat:openshift:4.7::el7
 before 0:4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el7
0:4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el7
openshift
Red Hat:openshift:4.7::el8
 before 0:4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el8
0:4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.7::el8
 before 0:4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el8
0:4.7.0-202109172126.p0.git.bbbc079.assembly.stream.el8
openshift
Red Hat:openshift:4.6::el7
 before 0:4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el7
0:4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el7
openshift-hyperkube
Red Hat:openshift:4.6::el7
 before 0:4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el7
0:4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el7
openshift
Red Hat:openshift:4.6::el8
 before 0:4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el8
0:4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el8
openshift-hyperkube
Red Hat:openshift:4.6::el8
 before 0:4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el8
0:4.6.0-202109180038.p0.git.d5ed12c.assembly.stream.el8
atomic-openshift
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-clients
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-clients-redistributable
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-docker-excluder
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-excluder
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-hyperkube
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-hypershift
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-master
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-node
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-pod
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-sdn-ovs
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-template-service-broker
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
atomic-openshift-tests
Red Hat:openshift:3.11::el7
 before 0:3.11.524-1.git.0.2dffce7.el7
0:3.11.524-1.git.0.2dffce7.el7
govulncheck-vulndb
openSUSE:Tumbleweed
From an advisory covering 44 CVEs
 before 0.0.20250807T150727-1.1
0.0.20250807T150727-1.1

Public exploits

Links only. Every CVE stores no exploit code.

Public exploits
SourceLinkDate
PoC in GitHubBetep0k/CVE-2021-257412022-01-19
PoC in GitHubcdxiaodong/CVE-2021-257412023-10-19
PoC in GitHubGlutenfree69/ZigRaceExploit2026-03-17

History

History
RecordedChangedSources
affected, exploits, facts
affected
aliases, publishedEUVD
first indexedCVE List, GitHub Advisories, NVD, OSV, PoC in GitHub

Dates are when Every CVE recorded each change. Upstream dates may differ.

In short

CVE-2021-25741 is a high vulnerability (CVSS 8.8) in Kubernetes, published September 20, 2021. Public exploit code exists. EPSS puts the chance of exploitation in the next 30 days at 7.96%, the 94th percentile. Fixed in k8s.io/kubernetes 1.19.15.

References

Show 59 moreShow less
Pages All vulnerabilities Browse Docs Sources Guide Get API key
MoveEnter Open