8.2
High
CVE-2025-3528 A flaw was found in the Mirror Registry
Description
A flaw was found in the Mirror Registry. The quay-app container shipped as part of the Mirror Registry for OpenShift has write access to the `/etc/passwd`. This flaw allows a malicious actor with access to the container to modify the passwd file and elevate their privileges to the root user within that pod.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| MIRROR-REGISTRY-2.0-RHEL-8 2.0 | earliest → < 2.0.7-9 | 2.0.7-9 |
| mirror registry for Red Hat OpenShift | Versions not published |