Read the docs
TI-2025-08020 Aliases CVE-2025-8766GHSA-fmgm-mwqg-8w89

Noobaa-core: excessive permissions of /etc could lead to escalation of privilege in the noobaa-core container

Priority LOW 30CWE-276Published · Updated

Key facts

Attack vector
Local
Privileges required
High
User interaction
None
Attack complexity
High
Impact type
—
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.

Summary

A container privilege escalation flaw was found in certain Multi-Cloud Object Gateway Core images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In certain conditions, an attacker who can execute commands within an affected container, even as a non-root user, can leverage their membership in the root group to modify the /etc/passwd file. This could allow the attacker to add a new user with any arbitrary UID, including UID 0, leading to full root privileges within the container

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00175 7th percentileScored 2026-11-07
Fix Fixed Red Hat: 1 advisory

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat Openshift Data Foundation 4.22—1782932114Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782931768Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782932104Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783536000Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783535989Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783536515Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782932521Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783018461Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783018421Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782932812Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783537001Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782932919Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783537586Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782932969Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782933015Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782933042Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783537392Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782933235Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782933251Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783537955Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782933417Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783537742Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782933602Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1783019377Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782934054Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782934036Patch availableCNA
Red HatRed Hat Openshift Data Foundation 4.22—1782934284Patch availableCNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782932114 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782931768 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782932104 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783536000 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783535989 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783536515 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782932521 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783018461 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783018421 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782932812 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783537001 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782932919 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783537586 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782932969 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782933015 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782933042 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783537392 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782933235 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782933251 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783537955 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782933417 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783537742 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782933602 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1783019377 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782934054 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782934036 Patch available CNA
  • Red Hat Openshift Data Foundation 4.22 VendorRed Hat Affected — Fixed in 1782934284 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:*4.0VulnerableRed Hat
  • cpe:2.3:a:redhat:openshift_data_foundation:4.0:*:*:*:*:*:*:* Versions 4.0 Vulnerable ·Red Hat

Remediation

Red Hat 1 advisory

  • RHSA-2026:37387 Released 2026-07-09 · Red Hat rating Important
    Red Hat OpenShift Data Foundation 4.22.0 security, enhancement & bug fix update
    • Red Hat Openshift Data Foundation 4.22 registry.redhat.io/odf4/cephcsi-rhel9, registry.redhat.io/odf4/cephcsi-rhel9-operator, registry.redhat.io/odf4/devicefinder-rhel9 +24

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat Openshift Data Foundation 4.22Fixed RHSA-2026:37387
Not affected: 1 product
  • Red Hat Openshift Data Foundation 4.22

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-8766
  2. 2026-10-03 Alias added: GHSA-fmgm-mwqg-8w89

References

Advisory 3

  • TI-2023-26623 The SSH transport protocol with certain OpenSSH extensions, found in OpenSSH before 9.6… CVSS 3.1MEDIUM 5.9
  • TI-2026-23208 Immutable.js: Improperly Controlled Modification of Object Prototype Attributes ('Prototype Pollution') in immutable CVSS 4.0HIGH 8.7
  • TI-2021-02935 Out-of-bounds read in lapack CVSS 3.1CRITICAL 9.1
  • TI-2021-02876 Broken or risky cryptographic algorithm in ceph CVSS 3.1MEDIUM 6.5

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences