Local Privilege Escalation Vulnerability in Google gVisor's runsc Component

CVE-2025-2713

What is CVE-2025-2713?

The runsc component of Google gVisor contains a local privilege escalation vulnerability stemming from improper handling of file access permissions. This flaw allows unprivileged users to gain access to restricted files, as the process operates with root-like permissions prior to its first fork. The implications of this vulnerability could enable unauthorized information disclosure and alterations to sensitive files, underscoring the need for immediate attention and system updates.

References