CVE-2025-22873
Fixed in a distro release EPSS <1%CVSS 3.8
It was possible to improperly access the parent directory of an os.Root by opening a filename ending in "../". For example, Root.Open("../") would open the parent directory of the Root. This escape only permits opening the parent directory itself, not ancestors of the parent or files contained within the parent.
Products: Go standard library os
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| Go | stdlib | 1.23.9 |
| Go | stdlib | 1.24.3 |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Amazon Linux 2023 | golang | 1.24.3-1.amzn2023.0.1 |
| Amazon Linux 2023 | golang-bin | 1.24.3-1.amzn2023.0.1 |
| Amazon Linux 2023 | golang-docs | 1.24.3-1.amzn2023.0.1 |
| Amazon Linux 2023 | golang-misc | 1.24.3-1.amzn2023.0.1 |
| Amazon Linux 2023 | golang-shared | 1.24.3-1.amzn2023.0.1 |
| Amazon Linux 2023 | golang-src | 1.24.3-1.amzn2023.0.1 |
| Amazon Linux 2023 | golang-tests | 1.24.3-1.amzn2023.0.1 |
| Arch Linux | go | 2:1.24.3-1 |
| Chainguard | go-1.20 | 0 |
| Chainguard | go-1.20 | no fix |
| Chainguard | go-1.22 | no fix |
| Chainguard | go-1.22 | 0 |
| Chainguard | katib-earlystopping | 0.19.0-r31 |
| Chainguard | katib-suggestion-goptuna-compat | no fix |
| Chainguard | katib-suggestion-hyperband | 0.19.0-r31 |
| Chainguard | katib-suggestion-hyperopt | 0.19.0-r40 |
| Chainguard | katib-suggestion-hyperopt | 0.19.0-r31 |
| Chainguard | katib-suggestion-nas-darts | 0.19.0-r31 |
| Chainguard | katib-suggestion-nas-enas | 0.19.0-r31 |
| Chainguard | katib-suggestion-optuna-enas | 0.19.0-r31 |
| Chainguard | katib-suggestion-pbt-enas | 0.19.0-r31 |
| Chainguard | katib-suggestion-skopt-enas | 0.19.0-r31 |
| Chainguard | katib-tfevent-metricscollector | 0.19.0-r31 |
| Chainguard | nvidia-nsight-compute-12.8 | 2025.1.1.2-r10 |
| Chainguard | nvidia-nsight-compute-12.9 | 2025.2.1.3-r8 |
| Chainguard | nvidia-nsight-compute-13.0 | 2025.3.1.4-r1 |
| Chainguard | nvidia-nsight-compute-13.1 | 2025.4.1.2-r3 |
| Chainguard | nvidia-nsight-compute-13.2 | 2026.1.1.2-r0 |
| Debian 13 | golang-1.24 | 1.24.4-1 |
| Red Hat hummingbird 1 | golang1.25 | 0:1.25.9-1.hum1 |
| Red Hat hummingbird 1 | golang1.25-bin | 0:1.25.9-1.hum1 |
| Red Hat hummingbird 1 | golang1.25-docs | 0:1.25.9-1.hum1 |
| Red Hat hummingbird 1 | golang1.25-misc | 0:1.25.9-1.hum1 |
| Red Hat hummingbird 1 | golang1.25-shared | 0:1.25.9-1.hum1 |
| Red Hat hummingbird 1 | golang1.25-src | 0:1.25.9-1.hum1 |
| Red Hat hummingbird 1 | golang1.25-tests | 0:1.25.9-1.hum1 |
| Red Hat hummingbird 1 | golang1.26 | 0:1.26.2-1.hum1 |
| Red Hat hummingbird 1 | golang1.26-bin | 0:1.26.2-1.hum1 |
| Red Hat hummingbird 1 | golang1.26-docs | 0:1.26.2-1.hum1 |
| Red Hat hummingbird 1 | golang1.26-misc | 0:1.26.2-1.hum1 |
| Red Hat hummingbird 1 | golang1.26-shared | 0:1.26.2-1.hum1 |
| Red Hat hummingbird 1 | golang1.26-src | 0:1.26.2-1.hum1 |
| Red Hat hummingbird 1 | golang1.26-tests | 0:1.26.2-1.hum1 |
| SUSE Enterprise Storage 7.1 | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Enterprise Storage 7.1 | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP3-LTSS | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-ESPOS | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP4-LTSS | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-ESPOS | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise High Performance Computing 15 SP5-LTSS | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP6 | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise Module for Development Tools 15 SP7 | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise Server 15 SP3-LTSS | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise Server 15 SP4-LTSS | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise Server 15 SP5-LTSS | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP3 | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | go1.24 | 1.24.4-150000.1.26.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP4 | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | go1.24 | 1.24.3-150000.1.23.1 |
| SUSE Linux Enterprise Server for SAP Applications 15 SP5 | go1.24 | 1.24.4-150000.1.26.1 |
| Ubuntu 22.04 LTS | golang-1.24 | no fix |
| Ubuntu 24.04 LTS | golang-1.24 | no fix |
| Ubuntu 25.10 | golang-1.24 | no fix |
| Ubuntu 26.04 LTS | golang-1.24 | no fix |
| Wolfi | go-1.20 | 0 |
| Wolfi | go-1.20 | no fix |
| Wolfi | go-1.22 | no fix |
| Wolfi | go-1.22 | 0 |
| Wolfi | katib-earlystopping | 0.19.0-r31 |
| Wolfi | katib-suggestion-goptuna-compat | no fix |
| Wolfi | katib-suggestion-hyperband | 0.19.0-r31 |
| Wolfi | katib-suggestion-hyperopt | 0.19.0-r31 |
| Wolfi | katib-suggestion-hyperopt | 0.19.0-r40 |
| Wolfi | katib-suggestion-nas-darts | 0.19.0-r31 |
| Wolfi | katib-suggestion-nas-enas | 0.19.0-r31 |
| Wolfi | katib-suggestion-optuna-enas | 0.19.0-r31 |
| Wolfi | katib-suggestion-pbt-enas | 0.19.0-r31 |
| Wolfi | katib-suggestion-skopt-enas | 0.19.0-r31 |
| Wolfi | katib-tfevent-metricscollector | 0.19.0-r31 |
| openSUSE Leap 15.6 | go1.24 | 1.24.4-150000.1.26.1 |
| openSUSE Leap 15.6 | go1.24 | 1.24.3-150000.1.23.1 |
| openSUSE Leap 15.6 | govulncheck-vulndb | 0.0.20260205T172317-150000.1.146.1 |
| openSUSE Leap 16.0 | govulncheck-vulndb | 0.0.20260723T184607-160000.1.1 |
| openSUSE Tumbleweed | go1.24 | 1.24.3-1.1 |