CVE-2021-30465
CVE Details
Visit the official vulnerability details page for CVE-2021-30465 to learn more.
Initial Publication
10/10/2025
Last Update
10/14/2025
Third Party Dependency
github.com/opencontainers/runc
NIST CVE Summary
runc before 1.0.0-rc95 allows a Container Filesystem Breakout via Directory Traversal. To exploit the vulnerability, an attacker must be able to create multiple containers with a fairly specific mount configuration. The problem occurs via a symlink-exchange attack that relies on a race condition.
CVE Severity
Our Official Summary
This vulnerability is a false positive. Although this is reported by the scanning tools on some of the components, further checks indicate the symbol/function with the vulnerability while present is not being used.
Status
Open
Affected Products & Versions
This CVE is non-impacting as the impacting symbol and/or function is not used in the product
Revision History
No revisions available.