This vulnerability involves incorrect default permissions on the /etc/passwd file in some Red Hat Multicluster Engine for Kubernetes container images. The file is group-writable, which allows an attacker who can run commands inside the container and is part of the root group to alter /etc/passwd. By doing so, the attacker can create a new user with any UID, including UID 0, effectively escalating privileges to root within the container environment. The CVSS 3.1 vector indicates the attack requires local access with high privileges and high attack complexity, but results in high confidentiality, integrity, and availability impacts. No patch or official remediation level is currently documented in the vendor advisory.

Successful exploitation allows an attacker with command execution inside the container and root group membership to escalate privileges to root by modifying the /etc/passwd file. This leads to full root privileges within the container, compromising confidentiality, integrity, and availability of containerized workloads. There are no known exploits in the wild, and the vulnerability affects container images of Red Hat Multicluster Engine for Kubernetes.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-57851 for current remediation guidance. Until an official fix is available, restrict container access to trusted users only and avoid granting root group membership inside containers. Monitor vendor communications for updates on patches or workarounds.