CVE-2025-3528
Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry
We use these services and cookies to improve your user experience. You may opt out if you wish, however, this may limit some features on this site.
Please see our statement on Data Privacy.
Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry
A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.
Reserved 2025-04-11 | Published 2025-05-09 | Updated 2025-05-21 | Assigner redhat| 2025-04-11: | Reported to Red Hat. |
| 2024-04-11: | Made public. |
Red Hat would like to thank Antony Di Scala and Mike Whale for reporting this issue.
access.redhat.com/security/cve/CVE-2025-3528
bugzilla.redhat.com/show_bug.cgi?id=2359143 (RHBZ#2359143)
Support options
