CVE-2025-58712: Amq: privilege escalation via excessive /etc/passwd permissions

Severity: medium (CVSS 6.4 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.2% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2025-10-22 · updated 2026-10-18
Weakness: CWE-276

Description

A container privilege escalation flaw was found in certain AMQ Broker images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

Affected products

Red Hat AMQ Broker 7: all versions
Red Hat RHEL-9 based Middleware Containers: all versions — fixed in 7.13.2-1

How to fix

Upgrade to a fixed version: Red Hat RHEL-9 based Middleware Containers 7.13.2-1. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2025-58712 or the next vulnerability affects your stack