Dstack-TEE dstack up to 0.5.3 /data file access

Summaryinfo

A vulnerability was found in Dstack-TEE dstack up to 0.5.3. It has been declared as problematic. Affected is an unknown function of the file /data. The manipulation results in file access. This vulnerability is cataloged as CVE-2025-59054. The attack must be initiated from a local position. There is no exploit available. It is recommended to upgrade the affected component.

Detailsinfo

A vulnerability classified as problematic has been found in Dstack-TEE dstack up to 0.5.3. Affected is some unknown processing of the file /data. The manipulation with an unknown input leads to a file access vulnerability. CWE is classifying the issue as CWE-552. The product makes files or directories accessible to unauthorized actors, even though they should not be. This is going to have an impact on confidentiality, integrity, and availability. CVE summarizes:

dstack is a software development kit (SDK) to simplify the deployment of arbitrary containerized apps into trusted execution environments. In versions of dstack prior to 0.5.4, a malicious host may provide a crafted LUKS2 data volume to a dstack CVM for use as the `/data` mount. The guest will open the volume and write secret data using a volume key known to the attacker, causing disclosure of Wireguard keys and other secret information. The attacker can also pre-load data on the device, which could potentially compromise guest execution. LUKS2 volume metadata is not authenticated and supports null key-encryption algorithms, allowing an attacker to create a volume such that the volume opens (cryptsetup open) without error using any passphrase or token, records all writes in plaintext (or ciphertext with an attacker-known key), and/or contains arbitrary data chosen by the attacker. Version 0.5.4 of dstack contains a patch that addresses LUKS headers.

The advisory is shared for download at github.com. This vulnerability is traded as CVE-2025-59054 since 09/08/2025. The exploitability is told to be easy. The attack needs to be approached locally. There are known technical details, but no exploit is available. The MITRE ATT&CK project declares the attack technique as T1083.

Upgrading to version 0.5.4 eliminates this vulnerability. Applying the patch e36ad5f732d8821876a861934e1f47cda7b1a130 is able to eliminate this problem. The bugfix is ready for download at github.com. The best possible mitigation is suggested to be upgrading to the latest version.

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Productinfo

Vendor

• Dstack-TEE

Name

• dstack

Version

• 0.5.0
• 0.5.1
• 0.5.2
• 0.5.3

License

• open-source

Website

• Product: https://github.com/Dstack-TEE/dstack/

CPE 2.3info

• 🔒
• 🔒
• 🔒

CPE 2.2info

• 🔒
• 🔒
• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

VulDB is the best source for vulnerability data and more expert information about this specific topic.

Discussion