CVE-2025-71424 | CVSS: 3.5 | 严重级别: LOW
Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME directive in a Dockerfile (config.volumes in the OCI image configuration) is only a hint and is not handled specially by Kubernetes, but containerd adds a mount point for it when Kubernetes sets none, requiring the runtime to be able to push arbitrary data to the Kata agent. As a result, on bare-metal Contrast deployments (AKS deployments are not affected) that run an image declaring at least one VOLUME for which no Kubernetes mount exists at that path, t
参考链接:
• https://github.com/edgelesssys/contrast/security/advisories/GHSA-phhq-63jg-fp7r
• https://www.vulncheck.com/advisories/edgeless-systems-contrast-before-1.9.1-inse
📌 数据来源: NVD 官方