Skip to main content
VulnerabilityPublished Updated

CVE-2025-57848: A container privilege escalation flaw was found in certain Container-native Virtualization images

Source GCVE Database

0
Compare
Authoritative record:CVE-2025-57848· Medium 6.4

Not known to be exploited · CVSS 6.4 Medium : update RHEL-8-CNV-4.12 when convenient.

Data as of 30 Oct 2026, 22:22 UTC

CVSS 3.1 base score
6.4Medium
How severe the flaw is on the 0–10 CVSS scale.

Thin evidence

One scorer or none
CVSS scores by source
CNA (redhat)CVSS 3.16.4
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Affected software

ProductAffectedFixed in
RHEL-8-CNV-4.12container-native-virtualization/bridge-markerAffected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/cluster-network-addons-operatorAffected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/cnv-containernetworking-pluginsAffected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/cnv-must-gather-rhel8Affected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/hco-bundle-registryAffected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/hostpath-csi-driverAffected–Fixed in–

Description

A container privilege escalation flaw was found in certain Container-native Virtualization images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

References

Community reviews

Loading reviews…