Container Privilege Escalation Flaw in CodeReady Workspaces by Red Hat

CVE-2025-57850

What is CVE-2025-57850?

A vulnerability exists in CodeReady Workspaces images that enables a privilege escalation threat in container environments. This arises from the /etc/passwd file being configured with group-writable permissions during the build process. Consequently, if an attacker, regardless of their user status within the container, executes commands, they can exploit their membership in the root group to manipulate the /etc/passwd file. This can lead to adding a new user with any arbitrary UID, including UID 0, which grants full root privileges within the container, compromising the integrity and security of the application.

References