CVE-2025-8766
6.4
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Summary
A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container
Affected Software
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932114 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782931768 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932104 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536000 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783535989 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536515 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932521 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018461 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018421 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932812 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537001 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932919 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537586 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932969 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933015 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933042 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537392 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933235 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933251 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537955 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933417 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537742 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933602 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783019377 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934054 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934036 < * | unaffected |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782934284 < * | unaffected |
Weaknesses
- CWE-276: Incorrect Default Permissions
ADP Enrichment
CISA ADP Vulnrichment
- SSVC:
- Exploitation: none
- Automatable: no
- Technical Impact: total
noobaa-core: Excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container
Additional References
- https://access.redhat.com/security/cve/CVE-2025-8766
- https://bugzilla.redhat.com/show_bug.cgi?id=2387265
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-8766.json
- https://access.redhat.com/errata/RHSA-2026:37387
References
- https://access.redhat.com/errata/RHSA-2026:37387
- https://access.redhat.com/security/cve/CVE-2025-8766
- https://bugzilla.redhat.com/show_bug.cgi?id=2387265
Feedback
Was this page helpful?
Glad to hear it! Please tell us how we can improve.
Sorry to hear that. Please tell us how we can improve.