The vulnerability arises from improper handling of authentication in the socket_handler function within src/havegecmd.c of the SUSE container suse/sle-micro-rancher/5.3:latest. Although the code detects non-root users connecting to the abstract UNIX socket \0/sys/entropy/haveged and prepares a negative acknowledgement, it does not stop further execution. Consequently, unprivileged local users can bypass authentication controls and execute privileged commands, including MAGIC_CHROOT. This represents a primary weakness in authentication (CWE-305) and poses a significant risk to system security.

Successful exploitation allows local unprivileged users to bypass authentication and execute privileged commands, potentially leading to full system compromise including confidentiality, integrity, and availability impacts. The CVSS 3.1 score of 7.8 reflects high severity with local attack vector, low attack complexity, and no user interaction required.

Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Until an official fix is available, restrict local access to the affected container environment to trusted users only and monitor for suspicious activity related to the haveged socket. Avoid running untrusted code or users within this container.