CVE-2025-59291

HighCVSS 8.2

Published: 14/10/2025(UTC)Updated: 08/10/2026(UTC)Translated: 08/10/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.44%

37th percentile - higher than 37% of all known CVEs

Summary

The vulnerability in Confidential Azure Container Instances involves external control of file name or path. An authorized attacker can exploit this vulnerability to elevate privileges locally.

Risk Assessment

An authorized attacker can elevate privileges locally, potentially leading to system integrity and data confidentiality breaches.

Recommendation

Restrict access to Confidential Azure Container Instances and monitor activities for privilege escalation attempts.

Other vulnerabilities in Azure Container Instances

CVE-2025-59292High
The vulnerability in Confidential Azure Container Instances involves external control of file name or path. An authorized attacker can exploit this vulnerability to elevate privileges locally.

Original NVD description (English source)

External control of file name or path in Confidential Azure Container Instances allows an authorized attacker to elevate privileges locally.

Vulnerability data from NVD (NIST) · CISA KEV · EPSS