This vulnerability involves incorrect default permissions on the /etc/passwd file in certain OSUS container images, allowing an attacker with limited privileges but root group membership inside the container to escalate to full root privileges by modifying /etc/passwd. The flaw is due to group-writable permissions set during image build time. Exploitation requires the ability to execute commands inside the container and group membership, which limits the attack vector. The CVSS 3.1 base score is 6.4, reflecting medium severity with high impact on confidentiality, integrity, and availability within the container context. Red Hat has published an advisory but has not yet provided explicit remediation or patch details.

Successful exploitation allows an attacker with command execution and root group membership inside the affected container to escalate privileges to root by adding arbitrary users with UID 0 in /etc/passwd. This compromises container confidentiality, integrity, and availability by granting full root access within the container environment. The vulnerability does not directly affect the host or other containers unless further container escape vulnerabilities exist. There are no known exploits in the wild as of the advisory publication.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-57854 for current remediation guidance. Until a fix is available, restrict container access to trusted users only, especially limiting membership in the root group within containers. Avoid running containers with unnecessary group privileges. Monitor Red Hat's advisory for updates on official fixes or workarounds.