← Database

CVE-2025-3528

HIGH CVSS: 8.2 Published: 2025-05-09 Modified: 2026-06-17

Description

A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.

Affected Platforms

Unknown

Weakness Type

CWE-276

References