A container privilege escalation vulnerability exists in KServe ModelMesh container images due to the /etc/passwd file being created with group-writable permissions during build time. An attacker with command execution inside the container and membership in the root group can modify /etc/passwd to add a user with arbitrary UID, including root (UID 0), leading to full root privileges within the container.