This vulnerability involves incorrect default permissions on the /etc/passwd file in some OSUS container images, specifically that the file is group-writable. This misconfiguration allows an attacker who can run commands inside the container and is in the root group to escalate privileges by adding a new user with UID 0. The flaw is limited to container environments where the attacker has certain privileges and group membership. The CVSS vector indicates the attack requires local access with high privileges and no user interaction, impacting confidentiality, integrity, and availability within the container. The vendor advisory does not currently specify a patch or fix.

Successful exploitation allows an attacker with command execution inside the container and root group membership to gain full root privileges within that container by modifying /etc/passwd. This elevates the attacker's privileges from a non-root user to root inside the container environment, potentially compromising container integrity and confidentiality. The impact is confined to the container scope and does not imply host-level compromise. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-57854 for current remediation guidance. Until an official fix is available, restrict container access to trusted users only and avoid granting unnecessary root group membership inside containers. Monitor Red Hat communications for updates on patches or workarounds.