CVE-2025-2713 Improper File Permission Handling in Google gVisor runsc
Unprivileged users can escalate privileges and read restricted files in gVisor runsc due to improper permission handling during process initialization.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Local or same network only
- Victim action needed
- Not needed
- Fix
- Available
What is CVE-2025-2713?
CVE-2025-2713 is a medium-severity vulnerability in Google gVisor, published on 28 Mar 2025. It can only be exploited from the same machine or local network, with no action from the victim.
Official description
Google gVisor's runsc component exhibited a local privilege escalation vulnerability due to incorrect handling of file access permissions, which allowed unprivileged users to access restricted files. This occurred because the process initially ran with root-like permissions until the first fork.
Weakness: CWE-266
Which versions are affected by CVE-2025-2713?
It affects 1 product.
Products include Google Gvisor.
How do I fix CVE-2025-2713?
Apply the vendor's patch.
Is CVE-2025-2713 being exploited?
There is no known exploitation of CVE-2025-2713 in the wild and no public exploit code.
Other vulnerabilities in Google gVisor
Sources
Also known as DEBIAN-CVE-2025-2713, GHSA-4fj4-9m67-3mj3, UBUNTU-CVE-2025-2713.