CVE-2021-3917

CVE-2021-3917 is a medium-severity vulnerability affecting Red Hat coreos-installer, where it incorrectly sets world-readable permissions on Ignition configuration files. This flaw allows a local attacker to gain unauthorized read access to potentially sensitive data within these configurations. The CVSS score of 5.5 indicates a low attack complexity and privilege requirement, with a high impact on confidentiality. There is currently no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.