Medium severity · published Sep 23, 2025
CVE-2025-58354
Kata Containers coco-tdx malicious host can circumvent initdata verification
6.9
CVSS
0.3%
EPSS
No
On KEV
Description
Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, a malicious host can selectively fail IO operations to skip initdata verification. This allows an attacker to launch arbitrary workloads while being able to attest successfully to Trustee impersonating any benign workload. This issue has been patched in Kata Containers version 3.21.0.
Exploitation
Is it being used?
Exploit prediction (EPSS)0.3% · higher than 27% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
KA
kata-containers · kata-containers
< 3.21.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-58354
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-58354
github.com
https://github.com/kata-containers/kata-containers/commit/3e67f92e34be974e792c153add76e4e4baac9de0
github.com
https://github.com/kata-containers/kata-containers/security/advisories/GHSA-989w-4xr2-ww9m
More from kata-containers
10.0
CVE-2026-24054
Kata Containers Runtime: Host block device can be hotplugged to the VM if the container image is malformed or contains no layers
9.9
CVE-2026-44210
Kata Containers have VM Escape via virtiofsd Argument Injection through Default-Enabled Pod Annotations
9.6
CVE-2026-50540
Kata Containers: Config Path Annotation Arbitrary File Loading
9.2
CVE-2026-47243
Kata guest escape: runtime-rs guest-root to host-root escape via virtiofs
8.8
CVE-2026-24834
Kata Container to Guest micro VM privilege escalation