CVE-2025-7195

MEDIUM 6.4

Operator-sdk: privilege escalation due to incorrect permissions of /etc/passwd

CVSS Score

6.4

EPSS Score

0.0%

EPSS Percentile

1th

Early versions of Operator-SDK provided an insecure method to allow operator containers to run in environments that used a random UID. Operator-SDK before 0.15.2 provided a script, user_setup, which modifies the permissions of the /etc/passwd file to 664 during build time. Developers who used Operator-SDK before 0.15.2 to scaffold their operator may still be impacted by this if the insecure user_setup script is still being used to build new container images. In affected images, the /etc/passwd file is created during build time with group-writable permissions and a group ownership of root (gid=0). An attacker who can execute commands within an affected container, even as a non-root user, may be able to leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container.

CWE	CWE-276
Vendor	operator-framework
Product	operator-sdk
Published	Aug 7, 2025
Last Updated	Apr 16, 2026

Stay Ahead of the Next One

Get instant alerts for operator-framework operator-sdk

Be the first to know when new medium vulnerabilities affecting operator-framework operator-sdk are published — delivered to Slack, Telegram or Discord.

Get Free Alerts → Free · No credit card · 60 sec setup

CVSS v3 Breakdown

CVSS:3.1/AV:L/AC:H/PR:H/UI:N/S:U/C:H/I:H/A:H

Attack Vector

Local

Attack Complexity

High

Privileges Required

High

User Interaction

None

Scope

Unchanged

Confidentiality

High

Integrity

High

Availability

High

Affected Versions

operator-framework / operator-sdk

0 < 0.15.2

Red Hat / RHEL-9-CNV-4.17

All versions affected

Red Hat / RHEL-9-CNV-4.18

All versions affected

Red Hat / RHEL-9-CNV-4.20

All versions affected

Red Hat / File Integrity Operator 1

All versions affected

Red Hat / multicluster engine for Kubernetes 2.6

All versions affected

Red Hat / multicluster engine for Kubernetes 2.6

All versions affected

Red Hat / multicluster engine for Kubernetes 2.6

All versions affected

Red Hat / multicluster engine for Kubernetes 2.6

All versions affected

Red Hat / multicluster engine for Kubernetes 2.6

All versions affected

Red Hat / multicluster engine for Kubernetes 2.6

All versions affected

Red Hat / multicluster engine for Kubernetes 2.6

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.7

All versions affected

Red Hat / multicluster engine for Kubernetes 2.8

All versions affected

Red Hat / multicluster engine for Kubernetes 2.8

All versions affected

Red Hat / multicluster engine for Kubernetes 2.8

All versions affected

Red Hat / multicluster engine for Kubernetes 2.8

All versions affected

Red Hat / multicluster engine for Kubernetes 2.8

All versions affected

Red Hat / multicluster engine for Kubernetes 2.8

All versions affected

Red Hat / multicluster engine for Kubernetes 2.8

All versions affected

Red Hat / multicluster engine for Kubernetes 2.8

All versions affected

Red Hat / multicluster engine for Kubernetes 2.9

All versions affected

Red Hat / multicluster engine for Kubernetes 2.9

All versions affected

Red Hat / multicluster engine for Kubernetes 2.9

All versions affected

Red Hat / multicluster engine for Kubernetes 2.9

All versions affected

Red Hat / multicluster engine for Kubernetes 2.9

All versions affected

Red Hat / multicluster engine for Kubernetes 2.9

All versions affected

Red Hat / multicluster engine for Kubernetes 2.9

All versions affected

Red Hat / multicluster engine for Kubernetes 2.9

All versions affected

Red Hat / OpenShift Compliance Operator 1

All versions affected

Red Hat / OpenShift Compliance Operator 1

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.11

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.11

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.11

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.11

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.12

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.13

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.13

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.13

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.13

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.13

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Advanced Cluster Management for Kubernetes 2.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.14

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.15

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.16

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected

Red Hat / Red Hat Openshift Data Foundation 4.17

All versions affected