{"id":"CVE-2025-58061","summary":"OpenEBS Local PV RawFile persistent volume data is world readable","details":"OpenEBS Local PV RawFile allows dynamic deployment of Stateful Persistent Node-Local Volumes & Filesystems for Kubernetes. Prior to version 0.10.0, persistent volume data is world readable and that would allow non-privileged users to access sensitive data such as databases of k8s workload. The rawfile-localpv storage class creates persistent volume data under /var/csi/rawfile/ on Kubernetes hosts by default. However, the directory and data in it are world-readable. It allows non-privileged users to access the whole persistent volume data, and those can include sensitive information such as a whole database if the Kubernetes tenants are running MySQL or PostgreSQL in a container so it could lead to a database breach. This issue has been patched in version 0.10.0.","aliases":["GHSA-wh95-vw4r-xwx4"],"modified":"2026-04-10T05:32:47.591380Z","published":"2025-08-28T22:03:35.698Z","database_specific":{"osv_generated_from":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58061.json","cwe_ids":["CWE-200"],"cna_assigner":"GitHub_M"},"references":[{"type":"ADVISORY","url":"https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/58xxx/CVE-2025-58061.json"},{"type":"ADVISORY","url":"https://github.com/openebs/rawfile-localpv/security/advisories/GHSA-wh95-vw4r-xwx4"},{"type":"ADVISORY","url":"https://nvd.nist.gov/vuln/detail/CVE-2025-58061"}],"affected":[{"ranges":[{"type":"GIT","repo":"https://github.com/openebs/rawfile-localpv","events":[{"introduced":"0"},{"fixed":"cfa49b9189f5d989712f8128edb319b4e9e3d43c"}],"database_specific":{"versions":[{"introduced":"0"},{"fixed":"0.10.0"}]}}],"versions":["0.3.0","0.4.0","0.4.1","0.4.2","0.4.3","0.4.4","0.5.0","0.7.0","0.8.0"],"database_specific":{"source":"https://storage.googleapis.com/cve-osv-conversion/osv-output/CVE-2025-58061.json"}}],"schema_version":"1.7.5","severity":[{"type":"CVSS_V3","score":"CVSS:3.1/AV:L/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N"}]}