BaseFortify

Publication date: 2025-12-02

Last updated on: 2026-03-07

Assigner: Red Hat, Inc.

Description

A container privilege escalation flaw was found in certain CodeReady Workspaces images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

CVSS Scores

EPSS Scores

Probability:
Percentile:

Meta Information

Published

2025-12-02

Last Modified

2026-03-07

Generated

2026-07-06

AI Q&A

2025-12-02

EPSS Evaluated

2026-07-05

NVD

CVE-2025-57850

EUVD

EUVD-2025-200300

Affected Vendors & Products

Vendor	Product	Version / Range
redhat	codeready_ws	*

Helpful Resources

Exploitability

CWE

KEV

CWE ID	Description
CWE-276	During installation, installed file permissions are set to allow anyone to modify those files.

Attack-Flow Graph

Executive Summary

This vulnerability is a container privilege escalation flaw found in certain CodeReady Workspaces images. It occurs because the /etc/passwd file is created with group-writable permissions during build time. An attacker who can run commands inside the affected container, even as a non-root user, and who is a member of the root group, can modify the /etc/passwd file. This allows the attacker to add a new user with any user ID, including UID 0, effectively gaining full root privileges within the container.

Impact Analysis

This vulnerability can allow an attacker with limited access inside a container to escalate their privileges to root within that container. This means the attacker could gain full control over the container environment, potentially leading to unauthorized actions, data modification, or disruption of services running inside the container.

Hi! I’m here to help you understand CVE-2025-57850. Ask me anything about the vulnerability, its impact, or mitigation strategies.

0/70