This vulnerability involves incorrect default permissions on the /etc/passwd file in certain container images of Red Hat Openshift Data Foundation 4. Because the file is group-writable, an attacker who can execute commands inside the container and is part of the root group can modify /etc/passwd to create a new user with root privileges. This leads to privilege escalation within the container environment. The vulnerability has a CVSS 3.1 base score of 6.4 (medium severity) with attack vector local, high attack complexity, high privileges required, no user interaction, and impacts confidentiality, integrity, and availability. The vendor advisory URL is provided but does not explicitly confirm patch availability or remediation steps.

Successful exploitation allows an attacker with local command execution and root group membership inside the container to escalate privileges to full root within that container. This compromises confidentiality, integrity, and availability of the container environment. There are no known exploits in the wild at this time.

Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2025-8766 for current remediation guidance. Until an official fix is available, restrict access to container environments to trusted users only and avoid granting unnecessary root group membership within containers. Monitor vendor communications for updates on patches or workarounds.