This vulnerability arises from incorrect default permissions on the /etc/passwd file in some Red Hat Web Terminal container images, where the file is group-writable. This misconfiguration allows a user who can execute commands inside the container and is part of the root group to alter /etc/passwd, potentially adding a user with UID 0. This leads to privilege escalation to root within the container environment. The CVSS vector indicates the attack requires local access with high privileges and no user interaction, impacting confidentiality, integrity, and availability. The vendor advisory does not currently specify a remediation or patch status.

Successful exploitation allows an attacker with command execution inside the container and root group membership to escalate privileges to root by modifying /etc/passwd. This compromises container confidentiality, integrity, and availability by enabling full root access within the container. The impact is limited to the container environment and does not necessarily affect the host system or other containers unless further vulnerabilities exist.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-57853 for current remediation guidance. Until an official fix is available, restrict container access to trusted users and avoid granting root group membership inside containers. Review container build processes to ensure /etc/passwd permissions are not group-writable.