This vulnerability in Red Hat Ansible Automation Platform 2 involves incorrect default permissions on the /etc/passwd file inside certain container images. Because the file is group-writable, an attacker who can execute commands inside the container and is part of the root group can alter /etc/passwd to create a new user with any UID, including 0. This leads to privilege escalation to root within the container environment. The CVSS 3.1 score is 6.4, reflecting medium severity with high impact on confidentiality, integrity, and availability, but requiring local access with high privileges and no user interaction.

An attacker with local command execution inside the affected container and root group membership can escalate privileges to root by modifying /etc/passwd. This compromises container integrity and confidentiality by allowing arbitrary root-level access within the container. The vulnerability does not affect the host system directly but undermines container security boundaries.

Patch status is not yet confirmed — check the vendor advisory at https://access.redhat.com/security/cve/CVE-2025-57847 for current remediation guidance. Until an official fix is available, restrict container access to trusted users only and avoid granting root group membership inside containers. Monitor Red Hat advisories for updates on patches or workarounds.