Vendor

operator-framework

1 known vulnerabilities.

Products

All Critical High Medium Low Exploited only Public exploit

1 result · Clear filters · Feed

Medium 6.4

CVE-2025-7195

Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 duri…

Red Hat operator-framework Red Hat Advanced Cluster Management for Kubernetes 2.13 Red Hat Advanced Cluster Management for Kubernetes 2.14 Go

Aug 7, 2025