What’s Vulnerable › Vulnerabilities

CVE-2025-3528: Mirror-registry: local privilege escalation due to incorrect permissions in mirror-registry

• Severity: high (CVSS 8.2 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.2% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-05-09 · updated 2026-06-17
• Weakness: CWE-276

Description

A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.

Affected products

• Red Hat MIRROR-REGISTRY-2.0-RHEL-8: all versions — fixed in v2.0.7-9
• Red Hat mirror registry for Red Hat OpenShift: all versions

How to fix

Upgrade to a fixed version: Red Hat MIRROR-REGISTRY-2.0-RHEL-8 v2.0.7-9. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/errata/RHBA-2025:9645
• https://access.redhat.com/security/cve/CVE-2025-3528
• https://bugzilla.redhat.com/show_bug.cgi?id=2359143

Get alerted when CVE-2025-3528 or the next vulnerability affects your stack