The Cryostat 4 on RHEL 9 container images have been updated to fix multiple bugs, including a security vulnerability identified as CVE-2025-59343, which involves a symlink validation bypass in the tar-fs component. This vulnerability is categorized under CWE-22 (Path Traversal). The advisory recommends upgrading to the new container images available from the Red Hat Container Registry and rebuilding dependent images. The update is rated as having an Important security impact by Red Hat Product Security. No CVSS score is provided in the advisory.

The vulnerability allows bypassing symlink validation in the tar-fs component, which could potentially lead to unauthorized file access or manipulation within container environments using Cryostat 4 on RHEL 9 images. The advisory rates the security impact as Important (high severity). There are no known exploits in the wild at the time of the advisory.

Red Hat has released updated Cryostat 4.0.3 container images on RHEL 9 that include backported patches fixing the symlink validation bypass vulnerability. Users should upgrade to these updated images from the Red Hat Container Registry and rebuild all container images that depend on them. This is the official fix provided by Red Hat. Patch status is confirmed as available and remediation is through upgrading to the updated container images.