Skip to main content
VulnerabilityPublished Updated

CVE-2025-57848: A container privilege escalation flaw was found in certain Container-native Virtualization images

Source GCVE Database

0
Compare
Authoritative record:CVE-2025-57848· Medium 6.4

Not known to be exploited · CVSS 6.4 Medium : update RHEL-8-CNV-4.12 when convenient.

Data as of 31 Oct 2026, 00:06 UTC

CVSS 3.1 base score
6.4Medium
How severe the flaw is on the 0–10 CVSS scale.

Thin evidence

One scorer or none
CVSS scores by source
CNA (redhat)CVSS 3.16.4
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Exploitation evidence

  1. Disclosed: evidence found.

    CVE published 23 Oct 2025

  2. Detectable: no evidence on record.

    No public nuclei template indexed

  3. Weaponized: no evidence on record.

    No public exploit code indexed in Metasploit or Exploit-DB

  4. Exploited in the wild: no evidence on record.

    Not in CISA KEV and no source reports exploitation

  5. Observed by OffSeq Mirage: no evidence on record.

    No attack traffic recorded by OffSeq Mirage sensors

A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 30 Oct 2026.

What to do

Affected software

ProductAffectedFixed in
RHEL-8-CNV-4.12container-native-virtualization/bridge-markerAffected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/cluster-network-addons-operatorAffected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/cnv-containernetworking-pluginsAffected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/cnv-must-gather-rhel8Affected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/hco-bundle-registryAffected–Fixed in–
RHEL-8-CNV-4.12container-native-virtualization/hostpath-csi-driverAffected–Fixed in–

AI-suggested

Red Hat has released updated OpenShift Virtualization 4.19.14 images that fix this vulnerability. Users should apply these updates after ensuring all previously released errata are applied. Refer to Red Hat's update instructions at https://access.redhat.com/articles/11258. No additional mitigation steps are indicated in the advisory.

Description

A container privilege escalation vulnerability (CVE-2025-57848) exists in certain Container-native Virtualization images due to the /etc/passwd file being created with group-writable permissions during build time. An attacker with command execution inside the container and membership in the root group can modify /etc/passwd to add a user with arbitrary UID, including UID 0, gaining root privileges within the container. The issue has a CVSS score of 5.2 (medium severity). Red Hat has released updated OpenShift Virtualization 4.19.14 images that address this and other issues.

References

Community reviews

Loading reviews…