WID-SEC-W-2026-1033

csafDEcert_bund

DeutschShown in its original language — a full translation is planned for a future version.

Verschiedene Red Hat Produkte: Mehrere Schwachstellen ermöglichen Erlangen von Administratorrechten

view advisory published 2026-04-08

Ein lokaler Angreifer kann mehrere Schwachstellen in mehreren Red Hat-Produkten ausnutzen, um Administratorrechte zu erlangen.

01

describes (5)

Related CVEs.

IDseverity exploitable
CVE-2025-58713US—OT elevated—
A container privilege escalation flaw was found in certain Red Hat Process Automation Manager images. This issue stems from the /etc/passwd file being created with group-writable p…
CVE-2025-57854US—OT elevated—
A container privilege escalation flaw was found in certain OpenShift Update Service (OSUS) images. This issue stems from the /etc/passwd file being created with group-writable perm…
CVE-2025-57853US—OT elevated—
A container privilege escalation flaw was found in certain Web Terminal images. This issue stems from the /etc/passwd file being created with group-writable permissions during buil…
CVE-2025-57851USmedium6.7OT elevated—
A container privilege escalation flaw was found in certain Multicluster Engine for Kubernetes images. This issue stems from the /etc/passwd file being created with group-writable p…
CVE-2025-57847US—OT elevated—
A container privilege escalation flaw was found in certain Ansible Automation Platform images. This issue arises from the /etc/passwd file being created with group-writable permiss…
02

references

External citations — patches, advisories, analysis.

scry

Advisories like this name the exposed products attackers go after on your perimeter. See what is exposed on your perimeter with a free passive scan.

Free scan