Container Privilege Escalation Flaw in CodeReady Workspaces by Red Hat
CVE-2025-57850

5.2MEDIUM

Key Information:

Vendor: Red Hat
Status: Red Hat Openshift Dev Spaces
Vendor: CVE Published:; 2 December 2025

What is CVE-2025-57850?

A vulnerability exists in CodeReady Workspaces images that enables a privilege escalation threat in container environments. This arises from the /etc/passwd file being configured with group-writable permissions during the build process. Consequently, if an attacker, regardless of their user status within the container, executes commands, they can exploit their membership in the root group to manipulate the /etc/passwd file. This can lead to adding a new user with any arbitrary UID, including UID 0, which grants full root privileges within the container, compromising the integrity and security of the application.

Human OS v1.0:
Ageing Is an Unpatched Zero-Day Vulnerability.

Remediate biological technical debt. Prime Ageing uses 95% high-purity SIRT6 activation to maintain genomic integrity and bolster systemic resilience.

Deploy the Patch