CVE-2025-8766
Reported by redhat · Published March 13, 2026
A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container
Risk scores
Affected products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932114 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782931768 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932104 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536000 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783535989 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783536515 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932521 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018461 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783018421 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932812 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537001 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932919 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537586 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782932969 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933015 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933042 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537392 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933235 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1782933251 |
| Red Hat | Red Hat Openshift Data Foundation 4.22 | 1783537955 |
…and 65 more
Timeline
- Mar 13, 2026 EPSS Score (30 in total, the first dated here)
- Mar 13, 2026 CVE Published
- Mar 26, 2026 Coalition ESS Score (2 in total, the first dated here)
- Mar 29, 2026 Security Advisory (2 in total, the first dated here)
- Jul 11, 2026 Distribution Patch
- Jul 15, 2026 CVE Updated
Query this with the API
The same record, from the CLI:
vulnetix vdb vuln CVE-2025-8766
vulnetix vdb fixes CVE-2025-8766Or with curl, using the org id and key from your account page:
curl -s -H "Authorization: ApiKey ${VULNETIX_ORG_ID}:${VULNETIX_API_KEY}" \
"https://api.vdb.vulnetix.com/v2/vuln/CVE-2025-8766/fixes/registry"The Community plan is free and allows 50 queries a day. Get a free API key · API quickstart
References
- RHSA-2026:37387 vendor-advisoryx_refsource_REDHAT
- vdb-entryx_refsource_REDHAT
- RHBZ#2387265 issue-trackingx_refsource_REDHAT
- https://security.access.redhat.com/data/csaf/v2/vex/2025/cve-2025-8766.json advisory