Vulnerability · Published May 9, 2025 · Assigned by redhat
CVE-2025-3528Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry
High 8.2
In plain English
A high-severity incorrect default permissions in mirror-registry. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 14% of all known vulnerabilities).
Severity (CVSS 3.1)8.2High
Exploit odds (30 days)0.2%top 85.8% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known
Official description
A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| mirror-registry | 0 – before 2 | |
| Red Hat | MIRROR-REGISTRY-2.0-RHEL-8 | see references |
| Red Hat | mirror registry for Red Hat OpenShift | see references |
Weakness: CWE-276 · Vector: CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H
References
- RHBA-2025:9645 vendor-advisory, x_refsource_REDHAT
- https://access.redhat.com/security/cve/CVE-2025-3528 vdb-entry, x_refsource_REDHAT
- RHBZ#2359143 issue-tracking, x_refsource_REDHAT