CVE-2025-57848

Container-native-virtualization: privilege escalation via excessive /etc/passwd permissions

View on CVE.org
Published Oct 23, 2025 CVSS 3.1 · 6.4 Medium EPSS < 1% KEV · Not listed
Description
A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

Remediation

No solution or workaround provided in the CVE record

Tracking

Sign in to view the affected projects.

Advisories

No advisories available
History
Type Values Removed Values Added
CPEs cpe:/a:redhat:container_native_virtualization:4.16::el9
References
Type Values Removed Values Added
CPEs cpe:/a:redhat:container_native_virtualization:4.12::el8
cpe:/a:redhat:container_native_virtualization:4.14::el9
cpe:/a:redhat:container_native_virtualization:4.17::el9
cpe:/a:redhat:container_native_virtualization:4.18::el9
cpe:/a:redhat:container_native_virtualization:4.19::el9
References
Type Values Removed Values Added
Metrics cvssV3_1

{'score': 5.2, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L'}

 cvssV3_1

{'score': 6.4, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H'}
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

 ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'total'}, 'version': '2.0.3'}
Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate
Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}
Type Values Removed Values Added
Description A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
Title Container-native-virtualization: privilege escalation via excessive /etc/passwd permissions
First Time appeared Redhat
Redhat container Native Virtualization
Weaknesses CWE-276
CPEs cpe:/a:redhat:container_native_virtualization:4
Vendors & Products Redhat
Redhat container Native Virtualization
References
Metrics cvssV3_1

{'score': 5.2, 'vector': 'CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:L/I:H/A:L'}
Earlier changes (2)
Weaknesses

Sources

Status
PUBLISHED
Assigner
redhat
Published
Updated
Oct 30, 2026, 6:31 PM
Reserved
Aug 21, 2025, 2:40 PM

View source JSON

Updated
Oct 23, 2025, 8:34 PM

JSON

Status
Deferred
Published
Oct 23, 2025, 8:15 PM
Modified
Oct 30, 2026, 7:17 PM

View source JSON

Severity
Moderate
Public date
Oct 23, 2025, 7:55 PM

View source Bugzilla JSON

No data.