Container Privilege Escalation in Ansible Automation Platform

CVE-2025-57847

What is CVE-2025-57847?

A significant security flaw exists within the Ansible Automation Platform due to the improper setting of permissions for the /etc/passwd file during the image build process. This issue allows an attacker with command execution capabilities in a vulnerable container, even as a non-root user, to manipulate the /etc/passwd file if they are part of the root group. By exploiting this vulnerability, an attacker could introduce a new user with any user ID, potentially granting them root privileges within the container environment. Organizations are advised to review their deployment configurations and apply necessary updates to mitigate possible exploitation.

References