CVE-2025-8766Noobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container

Description

A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container

Timeline

Scores

EPSS (exploitation in 30 days)

0.19% · top 92% of all CVEs (14 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: Medium 6.4.

Affected products

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782932114 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782931768 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782932104 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783536000 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783535989 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783536515 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782932521 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783018461 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783018421 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782932812 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783537001 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782932919 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783537586 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782932969 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782933015 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782933042 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783537392 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782933235 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782933251 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783537955 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782933417 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783537742 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782933602 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1783019377 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782934054 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782934036 – < *

• Red Hat · Red Hat Openshift Data Foundation 4.22

  • unaffected 1782934284 – < *

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2025-208625 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2025-8766](https://cveledger.app/badge/CVE-2025-8766.svg)](https://cveledger.app/cve/CVE-2025-8766)

Record last updated 15 Jul 2026, 01:24 UTC.