8.2
High
CVE-2025-3528 A flaw was found in the Mirror Registry
Description
A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MIRROR-REGISTRY-2.0-RHEL-8 2.0 | earliest → < 2.0.7-9 | 2.0.7-9 |
| mirror registry for Red Hat OpenShift | Versions not published |
References
- RHBA-2025:9645 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2359143 bugzilla.redhat.com
Timeline
- Published
- Last modified