Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2025-7195— Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

Quick assessment

Affected
operator-framework operator-sdk
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Red Hat File Integrity Operator是美国红帽（Red Hat）公司的一个文件完整性检测软件。 Red Hat File Integrity Operator 0.15.2之前版本存在安全漏洞，该漏洞源于user_setup脚本修改/etc/passwd文件权限不当，可能导致容器内权限提升。

CVSS 6.4 · Medium EPSS 0.23% · P13

Affected Version Matrix 217

VendorProduct Version RangeStatus
operator-framework operator-sdk < 0.15.2 affected
Red Hat Multicluster Engine for Kubernetes any unknown
any unaffected
any unaffected
any unknown
any affected
any unaffected
any unknown
any unknown
… +2 more rows
Red Hat multicluster engine for Kubernetes 2.6 v2.6< * unaffected
v2.6< * unaffected
v2.6< * unaffected
v2.6< * unaffected
v2.6< * unaffected
v2.6< * unaffected
v2.6< * unaffected
Red Hat multicluster engine for Kubernetes 2.7 v2.7< * unaffected
v2.7< * unaffected
v2.7< * unaffected
v2.7< * unaffected
v2.7< * unaffected
v2.7< * unaffected
v2.7< * unaffected
v2.7< * unaffected
… +8 more rows
Red Hat multicluster engine for Kubernetes 2.8 1765872406< * unaffected
1766360304< * unaffected
1765669648< * unaffected
1765866268< * unaffected
1765872399< * unaffected
1765872402< * unaffected
1765872398< * unaffected
1765872400< * unaffected
Red Hat multicluster engine for Kubernetes 2.9 v2.9< * unaffected
v2.9< * unaffected
v2.9< * unaffected
v2.9< * unaffected
v2.9< * unaffected
v2.9< * unaffected
v2.9< * unaffected
v2.9< * unaffected
Red Hat Multicluster Global Hub any unaffected
any unaffected
any unaffected
Red Hat OpenShift Compliance Operator 1 1.8.0< * unaffected
1768172669< * unaffected
Red Hat OpenShift File Integrity Operator - FIO 1 v1.3< * unaffected
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2 any unknown
any unaffected
any unaffected
any unaffected
any unaffected
any unaffected
any unaffected
any unaffected
… +8 more rows
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.11 v2.11< * unaffected
v2.11< * unaffected
v2.11< * unaffected
v2.11< * unaffected
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.12 v2.12< * unaffected
v2.12< * unaffected
v2.12< * unaffected
v2.12< * unaffected
v2.12< * unaffected
v2.12< * unaffected
v2.12< * unaffected
1773285089< * unaffected
… +4 more rows
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.13 1767569821< * unaffected
1767829032< * unaffected
1767569821< * unaffected
1767656229< * unaffected
1767829032< * unaffected
Red Hat Red Hat Advanced Cluster Management for Kubernetes 2.14 v2.14< * unaffected
v2.14< * unaffected
v2.14< * unaffected
v2.14< * unaffected
v2.14< * unaffected
v2.14< * unaffected
1769720041< * unaffected
1770343757< * unaffected
… +2 more rows
Red Hat Red Hat Advanced Cluster Security 4 any unaffected
Red Hat Red Hat build of Apicurio Registry 2 any unknown
Red Hat Red Hat build of Apicurio Registry 3 any unaffected
Red Hat Red Hat Fuse 7 any affected
Red Hat Red Hat OpenShift Container Platform 4 any affected
any affected
any affected
any unaffected
any unaffected
any affected
Red Hat Red Hat Openshift Data Foundation 4.14 v4.14-1764178221< * unaffected
v4.14-1764178222< * unaffected
v4.14-1764178236< * unaffected
v4.14-1764178273< * unaffected
v4.14-1764178715< * unaffected
v4.14-1764178261< * unaffected
v4.14-1764178354< * unaffected
v4.14-1764178419< * unaffected
… +10 more rows
Red Hat Red Hat Openshift Data Foundation 4.15 v4.15-1764176261< * unaffected
v4.15-1764176342< * unaffected
v4.15-1764176372< * unaffected
v4.15-1764176892< * unaffected
v4.15-1764176485< * unaffected
v4.15-1764176698< * unaffected
v4.15-1764176699< * unaffected
v4.15-1764176675< * unaffected
… +10 more rows
Red Hat Red Hat Openshift Data Foundation 4.16 v4.16-1764168955< * unaffected
v4.16-1764169118< * unaffected
v4.16-1764169242< * unaffected
v4.16-1764169544< * unaffected
v4.16-1764169347< * unaffected
v4.16-1764169479< * unaffected
v4.16-1764169526< * unaffected
v4.16-1764169464< * unaffected
… +10 more rows
Red Hat Red Hat Openshift Data Foundation 4.17 v4.17-1764167834< * unaffected
v4.17-1764167795< * unaffected
v4.17-1764167826< * unaffected
v4.17-1764167876< * unaffected
v4.17-1764168179< * unaffected
v4.17-1764167987< * unaffected
v4.17-1764168476< * unaffected
v4.17-1764168475< * unaffected
… +11 more rows
Red Hat Red Hat Openshift Data Foundation 4.18 v4.18-1761854289< * unaffected
v4.18-1761854280< * unaffected
v4.18-1761854280< * unaffected
v4.18-1761854319< * unaffected
v4.18-1761855549< * unaffected
v4.18-1761854321< * unaffected
v4.18-1761854422< * unaffected
v4.18-1761854430< * unaffected
… +11 more rows
Red Hat Red Hat OpenShift Virtualization 4 any affected
any unaffected
any unaffected
any unaffected
any unaffected
any unaffected
any unaffected
Red Hat Red Hat Web Terminal any unaffected
any unaffected
Red Hat RHEL-9-CNV-4.17 v4.17.39-2< * unaffected
Red Hat RHEL-9-CNV-4.18 v4.18.25-3< * unaffected
Red Hat RHEL-9-CNV-4.20 v4.20.3-3< * unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2025-7195

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd
Source: CVE Program / CVE List V5
Vulnerability Description
Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. In affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
缺省权限不正确
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat File Integrity Operator 安全漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat File Integrity Operator是美国红帽（Red Hat）公司的一个文件完整性检测软件。 Red Hat File Integrity Operator 0.15.2之前版本存在安全漏洞，该漏洞源于user_setup脚本修改/etc/passwd文件权限不当，可能导致容器内权限提升。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
operator-framework operator-sdk 0 ~ 0.15.2 -
Red Hat RHEL-9-CNV-4.17 v4.17.39-2 ~ * cpe:/a:redhat:container_native_virtualization:4.17::el9
Red Hat RHEL-9-CNV-4.18 v4.18.25-3 ~ * cpe:/a:redhat:container_native_virtualization:4.18::el9
Red Hat RHEL-9-CNV-4.20 v4.20.3-3 ~ * cpe:/a:redhat:container_native_virtualization:4.20::el9
Red Hat multicluster engine for Kubernetes 2.6 v2.6 ~ * cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat multicluster engine for Kubernetes 2.6 v2.6 ~ * cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat multicluster engine for Kubernetes 2.6 v2.6 ~ * cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat multicluster engine for Kubernetes 2.6 v2.6 ~ * cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat multicluster engine for Kubernetes 2.6 v2.6 ~ * cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat multicluster engine for Kubernetes 2.6 v2.6 ~ * cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat multicluster engine for Kubernetes 2.6 v2.6 ~ * cpe:/a:redhat:multicluster_engine:2.6::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.7 v2.7 ~ * cpe:/a:redhat:multicluster_engine:2.7::el9
Red Hat multicluster engine for Kubernetes 2.8 1765872406 ~ * cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat multicluster engine for Kubernetes 2.8 1766360304 ~ * cpe:/a:redhat:multicluster_engine:2.8::el9
Red Hat multicluster engine for Kubernetes 2.8 1765669648 ~ * cpe:/a:redhat:multicluster_engine:2.8::el9

II. Public POCs for CVE-2025-7195

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2025-7195

请登录查看更多情报信息。

Vendor Advisories for CVE-2025-7195 (23)

IV. Related Vulnerabilities

Same weakness: CWE-276

V. Comments for CVE-2025-7195

No comments yet

Leave a comment