CVE-2025-31133
Bulletin ID: AWS-2025-024 Scope: AWS Content Type: Important (requires attention) Publication Date: 2025/11/5 8:45 PM PDT CVE Identifiers: CVE-2025-31133, CVE-2025-52565, CVE-2025-52881 AWS is aware of recently disclosed security issues affecting the runc component of several open source container management systems (CVE-2025-31133, CVE-2025-52565, CVE-2025-52881) when launching new containers. AWS does not consider containers a security boundary, and does not utilize containers to isolate customers from each other. There is no cross-customer risk from these issues. AWS customers that utilize containers to isolate workloads within their own self-managed environments are strongly encouraged to contact their operating system vendor for any updates or instructions necessary to mitigate any potential concerns arising from these issues. With the exception of the AWS services listed below, no customer action is required to address this issue. As a best practice, AWS always recommends that you apply all security patches and software version updates. Affected services: Amazon Linux Bottlerocket Amazon Elastic Container Service (ECS) Amazon Elastic Kubernetes Service (EKS) AWS Elastic Beanstalk Finch AWS Deep Learning AMI AWS Batch Amazon SageMaker
CSIRTS triage
- What
- Security issues in the runc component could affect container management systems.
- Who is affected
- Customers utilizing containers in self-managed environments.
- Urgency
- Remediation is encouraged due to potential security risks in container isolation.
- Action
- Contact the operating system vendor for updates or instructions.
AI-assisted analysis generated from the source advisory — verify against the original.
⚡ Watch CVE-2025-31133
Get an email if CVE-2025-31133 is added to CISA KEV, gains public exploit code, or a new advisory cites it — max one per day, one-click unsubscribe.
Exploitation outlook
- Low exploitation risk0.67% 30-day exploitation probability — currently an unlikely target, but scores change as exploit code circulates. Riskier than 48% of all EPSS-scored CVEs.
Advisory coverage (2)
- high[UPDATE] [high] Red Hat Enterprise Linux (runc): Multiple vulnerabilities allow bypassing of security measurescert-bund · 2026-07-09
- unknownCVE-2025-31133, CVE-2025-52565, CVE-2025-52881 - runc container issuesaws · 2026-06-05
External references
Embed the live status
— this badge updates automatically when the KEV or exploit status changes. How to embed it →
[](https://www.csirts.com/cve/CVE-2025-31133)