Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. (CVE-2025-71424)
Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME directive in a Dockerfile (config.volumes in the OCI image configuration) is only a hint and is not handled specially by Kubernetes, but containerd adds a mount point for it when Kubernetes sets none, requiring the runtime to be able to push arbitrary data to the Kata agent. As a result, on bare-metal Contrast deployments (AKS deployments are not affected) that run an image declaring at least one VOLUME for which no Kubernetes mount exists at that path, the untrusted host can write arbitrary file trees below that mount point inside the confidential container, compromising the integrity of a directory that is typically important to the application's core functionality. Version 1.9.1 fixes the issue by disallowing this configuration in `contrast generate`.
AI Analysis
Technical Summary
The vulnerability (CVE-2025-71424) affects Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes up to version 1.9.0. The problem arises because the VOLUME directive in Dockerfiles is only a hint and not specially handled by Kubernetes. However, containerd adds a mount point when Kubernetes sets none, allowing the runtime to push arbitrary data to the Kata agent. On bare-metal deployments, this enables an untrusted host to write arbitrary file trees inside the confidential container at the mount point, compromising the integrity of important application directories. The issue does not affect AKS deployments. Version 1.9.1 fixes the vulnerability by disallowing this configuration in the 'contrast generate' command.
Potential Impact
The vulnerability allows an untrusted host on bare-metal deployments to write arbitrary files inside confidential containers at specific mount points, compromising the integrity of directories critical to the application's core functionality. There is no impact on confidentiality or availability, and AKS deployments are not affected.
Mitigation Recommendations
Upgrade to Contrast version 1.9.1 or later, which fixes the issue by disallowing configurations that declare VOLUME directives without corresponding Kubernetes mounts during image generation. No other mitigations are specified.
Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. (CVE-2025-71424)
Description
Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes, is affected in versions up to and including 1.9.0. The VOLUME directive in a Dockerfile (config.volumes in the OCI image configuration) is only a hint and is not handled specially by Kubernetes, but containerd adds a mount point for it when Kubernetes sets none, requiring the runtime to be able to push arbitrary data to the Kata agent. As a result, on bare-metal Contrast deployments (AKS deployments are not affected) that run an image declaring at least one VOLUME for which no Kubernetes mount exists at that path, the untrusted host can write arbitrary file trees below that mount point inside the confidential container, compromising the integrity of a directory that is typically important to the application's core functionality. Version 1.9.1 fixes the issue by disallowing this configuration in `contrast generate`.
CVSS v3.1
Score 3.5low
Affected software
pkg:github/edgelesssys/contrastRun on your own infrastructure? Check whether these packages are installed with threat-finder — our free open-source scanner.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability (CVE-2025-71424) affects Contrast, Edgeless Systems' runtime for confidential containers on Kubernetes up to version 1.9.0. The problem arises because the VOLUME directive in Dockerfiles is only a hint and not specially handled by Kubernetes. However, containerd adds a mount point when Kubernetes sets none, allowing the runtime to push arbitrary data to the Kata agent. On bare-metal deployments, this enables an untrusted host to write arbitrary file trees inside the confidential container at the mount point, compromising the integrity of important application directories. The issue does not affect AKS deployments. Version 1.9.1 fixes the vulnerability by disallowing this configuration in the 'contrast generate' command.
Potential Impact
The vulnerability allows an untrusted host on bare-metal deployments to write arbitrary files inside confidential containers at specific mount points, compromising the integrity of directories critical to the application's core functionality. There is no impact on confidentiality or availability, and AKS deployments are not affected.
Mitigation Recommendations
Upgrade to Contrast version 1.9.1 or later, which fixes the issue by disallowing configurations that declare VOLUME directives without corresponding Kubernetes mounts during image generation. No other mitigations are specified.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-4585-2273-g8cw
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2025-71424"]
- Database Specific Severity
- MODERATE
- Cvss Version
- 3.1
Threat ID: 6ab89bc3f7a7c54106941edf
Added to database: 09/27/2026, 04:29:55 UTC
Last enriched: 09/27/2026, 04:37:07 UTC
Last updated: 09/28/2026, 01:57:44 UTC
Views: 3
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.