This vulnerability involves incorrect default permissions on the /etc/passwd file inside specific Red Hat Process Automation Manager 7 container images. The file is group-writable, allowing users in the root group to modify it. An attacker able to execute commands in the container and belonging to the root group can exploit this to add a new user with UID 0, effectively escalating privileges to root within the container environment. The vulnerability is local (AV:L), requires high attack complexity (AC:H), and privileges (PR:H), with no user interaction needed (UI:N).

Successful exploitation allows an attacker with existing command execution and root group membership inside the container to escalate privileges to root by modifying /etc/passwd. This leads to full root privileges within the container, potentially compromising container integrity and security. The impact is limited to the container environment and does not imply host-level compromise. No known exploits are reported in the wild.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-58713 for current remediation guidance. Until an official fix is available, restrict container access to trusted users only and avoid granting root group membership inside containers. Review container build processes to ensure /etc/passwd permissions are correctly set to prevent group-writable access.