Authentication Bypass Vulnerability in Cockroach Labs Container Image

CVE-2025-9276

What is CVE-2025-9276?

The authentication bypass vulnerability in Cockroach Labs' cockroach-k8s-request-cert allows remote attackers to exploit a misconfiguration in the system's shadow file, specifically due to a blank password setting for the root user. This flaw enables unauthorized access to systems using the affected container image, posing significant security risks. Organizations should prioritize patching and monitoring to mitigate potential attacks. For more information, refer to the ZDI-25-855 advisory.

References