CVE-2021-25749
CVE-2021-25749 · runAsNonRoot logic bypass for Windows containers
This page contains facts from public vulnerability sources. Check the original advisory before updating.
Windows workloads can run as ContainerAdministrator even when those workloads set the runAsNonRoot option to true.
CVSS 7.8 · High · EPSS 0.2% · Fix available
- Published
- Updated
Stack: containers
Affected products and versions
kubernetes
- Versions
- ≥ kubelet v1.22.0 - v1.22.13, < v1.22.14: Affected (custom)
- ≥ kubelet v1.23.0 - v1.23.10, < v1.23.11: Affected (custom)
- ≥ kubelet v1.24.0 - v1.24.4, < v1.24.5: Affected (custom)
Update to v1.22.14