The Jo-Jo98 ciguard static security auditor container images prior to version 0.8.2 run as the root user due to the absence of a USER directive in the Dockerfile. This improper privilege management (CWE-269) can lead to elevated privileges within the container environment. The vulnerability affects all versions from 0.1.0 through 0.8.1. The issue was resolved by introducing a USER directive in version 0.8.2 to avoid running the container as root.

The vulnerability allows the container to run with root privileges by default, which could increase the risk of privilege escalation or unintended access within the container environment. However, the CVSS score of 3 and the low severity rating indicate limited impact, likely because exploitation requires local access with high privileges and user interaction is not required. There are no known exploits in the wild.

Upgrade to version 0.8.2 or later of the Jo-Jo98 ciguard container image, which includes the fix by adding a USER directive to avoid running as root. Since no official patch link or remediation level is provided, users should verify the version before deployment. Patch status is not explicitly confirmed beyond the version fix note; check the vendor's official advisory for the latest remediation guidance.