{"id":"CVE-2025-3528","aliases":["EUVD-2025-14164","GHSA-4mjc-w6xm-8xxc"],"status":"published","title":"Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry","description":"A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.","severity":{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-11","score":0.00232,"percentile":0.14251,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":false,"fix_available":false},"cwes":["CWE-276"],"published":"2025-05-09T11:58:24Z","modified":"2026-06-17T09:20:06Z","products":[{"vendor":"red hat","product":"mirror registry for red hat openshift"},{"vendor":"red hat","product":"mirror-registry-2.0-rhel-8"}],"references":[{"url":"https://access.redhat.com/errata/RHBA-2025:9645","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-3528","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2359143","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-3528"},{"url":"https://github.com/advisories/GHSA-4mjc-w6xm-8xxc"}],"sources":{"cve":[{"id":"CVE-2025-3528","title":"Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry","description":"A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.","status":"published","published":"2025-05-09T11:58:24.957Z","modified":"2026-02-27T16:29:37.084Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"cna"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:32:39.719629Z"}],"euvd":[{"id":"EUVD-2025-14164","description":"A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.","status":"published","published":"2025-05-09T11:58:24Z","modified":"2026-02-27T16:29:37Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"updated_at":"2026-11-02T19:48:14.049749Z"}],"ghsa":[{"id":"GHSA-4mjc-w6xm-8xxc","title":"A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror...","description":"A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.","status":"published","published":"2025-05-09T12:31:33Z","modified":"2025-08-14T18:32:30Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T15:03:17.959289Z"}],"nvd":[{"id":"CVE-2025-3528","description":"A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.","status":"published","published":"2025-05-09T12:15:33.223Z","modified":"2026-06-17T09:20:06.973Z","cvss":[{"version":"3.1","score":8.2,"vector":"CVSS:3.1/AV:L/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"high","assessor":"secondary"}],"cwes":["CWE-276"],"updated_at":"2026-11-02T14:11:07.176032Z"}]}}