CVE-2025-58354

Kata Containers is an open source project focusing on a standard implementation of lightweight Virtual Machines (VMs) that perform like containers. In Kata Containers versions from 3.20.0 and before, a malicious host can circumvent initdata verification. On TDX systems running confidential guests, a malicious host can selectively fail IO operations to skip initdata verification. This allows an attacker to launch arbitrary workloads while being able to attest successfully to Trustee impersonating any benign workload. This issue has been patched in Kata Containers version 3.21.0.

• CWE-754

• https://github.com/kata-containers/kata-containers/commit/3e67f92e34be974e792c153add76e4e4baac9de0
• https://github.com/kata-containers/kata-containers/security/advisories/GHSA-989w-4xr2-ww9m

Published

Sep 23, 2025

Last Modified

Jun 17, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-58348An issue was discovered in the Wi-Fi driver in Samsung Mobil…5.5
• CVE-2025-58349An issue was discovered in L2 in Samsung Mobile Processor, W…9.1
• CVE-2025-5835The Droip plugin for WordPress is vulnerable to unauthorized…8.8
• CVE-2025-58351Outline is a service that allows for collaborative documenta…6.8
• CVE-2025-58352Weblate is a web based localization tool. Versions lower tha…6.5
• CVE-2025-58353Promptcraft Forge Studio is a toolkit for evaluating, optimi…8.2
• CVE-2025-58355Soft Serve is a self-hostable Git server for the command lin…7.7
• CVE-2025-58356Constellation is the first Confidential Kubernetes. The Cons…8.3
• CVE-2025-583575ire is a cross-platform desktop artificial intelligence ass…9.6
• CVE-2025-58358Markdownify is a Model Context Protocol server for convertin…7.5
• CVE-2025-58359ZF FROST is a Rust implementation of FROST (Flexible Round-O…6
• CVE-2025-5836A vulnerability was found in Tenda AC9 15.03.02.13. It has b…6.3