CVE-2025-8766: Noobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container
A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container
Other sources
noobaa-core sets the entire /etc dir to 664. Allowing a user in the container to modify system files, including /etc/passwd. This could lead to an exscalation of privilege within the container or impact the integrity of processes within the container.
https://github.com/noobaa/noobaa-core/blame/23e67498e7f72f220c9aec8c1c671bff07d38d13/src/deploy/NVAbuild/setupplatform.sh#L115
— Red Hat
Affected Software
Event History
Frequently Asked Questions
What is the severity of CVE-2025-8766?
The severity of CVE-2025-8766 is rated as medium with a score of 6.4.
How do I fix CVE-2025-8766?
To fix CVE-2025-8766, ensure that the /etc/passwd file in the noobaa-core container does not have group-writable permissions during the build process.
What does CVE-2025-8766 exploit?
CVE-2025-8766 exploits excessive permissions on the /etc directory, which could lead to privilege escalation within the noobaa-core container.
What software is affected by CVE-2025-8766?
CVE-2025-8766 affects certain Multi-Cloud Object Gateway Core images in the noobaa-core software.
What conditions are necessary for CVE-2025-8766 to be exploited?
An attacker must have the ability to execute commands within the affected noobaa-core container to exploit CVE-2025-8766.