CVE-2025-58713

OVERVIEW CVE-2025-58713 is a container privilege escalation vulnerability affecting Red Hat Process Automation Manager images. The flaw stems from improper file permissions on the /etc/passwd file during container image build time, where the file is created with group-writable permissions. This configuration allows an attacker with command execution privileges within an affected container to escalate from non-root to full root access. SEVERITY The vulnerability carries a CVSS 3.1 score of 6.4 (MEDIUM) with a local attack vector requiring high privilege level access and high attack complexity. The impact is severe, however, as a successful exploit grants complete compromise of container confidentiality, integrity, and availability. An attacker with group membership can modify /etc/passwd to create a new user with UID 0, achieving root-level privileges within the container environment. EXPLOITATION STATUS There is no evidence of active exploitation in the wild. The vulnerability does not appear on the CISA Known Exploited Vulnerabilities catalog, and its extremely low EPSS score of 0.0000400 indicates minimal practical exploitation likelihood relative to other disclosed vulnerabilities. Community attention remains low, with the vulnerability classified as inactive on threat tracking systems, suggesting limited near-term exploitation risk despite the serious nature of the flaw if successfully exploited.