This vulnerability involves incorrect default permissions on the /etc/passwd file in certain container images of Red Hat Ansible Automation Platform 2. Because the file is group-writable, an attacker with command execution inside the container and root group membership can escalate privileges by adding a new user with UID 0. This allows full root access within the container environment. The CVSS vector indicates that the attack requires local access with high privileges and no user interaction, impacting confidentiality, integrity, and availability. Red Hat has published an advisory but has not yet provided a confirmed patch or remediation guidance.

An attacker who can execute commands inside an affected container and is a member of the root group can escalate privileges to root by modifying the /etc/passwd file. This results in full root privileges within the container, potentially compromising container integrity and confidentiality. The vulnerability does not directly affect the host system but can lead to significant container-level compromise.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-57847 for current remediation guidance. Until an official fix is available, restrict container access to trusted users and avoid granting root group membership inside containers. Monitor Red Hat communications for updates on patches or workarounds.