Skip to content
fr Sign in
6.4 Medium

CVE-2025-57854 A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images

Description

A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

Affected products and versions

Product Affected versions Fixed in
Red Hat OpenShift Update Service Versions not published

References

Timeline

  1. Published
  2. Last modified

Other CVEs of Red Hat OpenShift Update Service

The 15 CVEs of Red Hat OpenShift Update Service →
CVE-2026-92925 Redis: redis: out-of-bounds read via crafted cluster bus packets 7.1 High CVE-2026-74247 A flaw was found in Red Hat Quay 4.2 Medium CVE-2026-74245 A flaw was found in Red Hat Quay's exported logs feature 5.9 Medium CVE-2026-74244 A flaw was found in Red Hat Quay's Stripe billing webhook handler 5.9 Medium
Track this CVE