Skip to content
OpenAdvisories
High · 8.2 CVE-2025-3528 EUVD-2025-14164GHSA-4mjc-w6xm-8xxc

Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry

Published May 9, 2025 · Updated Feb 27, 2026 · Assigned by redhat

Description

A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.

Affected products

VendorProductAffectedFixed
— mirror-registry < 2 2
Red Hat MIRROR-REGISTRY-2.0-RHEL-8 — —
Red Hat mirror registry for Red Hat OpenShift — —

References