6.4
Medium
CVE-2025-57852 A container privilege escalation flaw was found in KServe ModelMesh container images
Description
A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift AI 2.16 | Versions not published | |
| Red Hat OpenShift AI 2.19 | Versions not published | |
| Red Hat OpenShift AI 2.21 | Versions not published | |
| Red Hat OpenShift AI 2.22 | Versions not published | |
| Red Hat OpenShift AI 2.24 | Versions not published |
Other CVEs of Red Hat OpenShift AI 2.16
The 14 CVEs of Red Hat OpenShift AI 2.16 →
CVE-2026-5483
A flaw was found in odh-dashboard in Red Hat Openshift AI
8.5
High
CVE-2026-2229
ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…
7.5
High
CVE-2026-1528
ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length
7.5
High
CVE-2026-1526
The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…
7.5
High