CVE-2025-7195

CVE-2025-7195 identifies a vulnerability in container images built with Operator-SDK versions prior to 0.15.2, where an insecure `user_setup` script modifies the `/etc/passwd` file to be group-writable during build time. This local privilege escalation requires an attacker to have existing command execution within the container as a non-root user who is also a member of the root group, indicating a high attack complexity. Successful exploitation allows an attacker to modify `/etc/passwd` to create a new user with root privileges (UID 0), leading to full control of the container. With a CVSS score of 6.4 (MEDIUM), the potential impact is high. Currently, there is no evidence of active exploitation, public exploit code, or significant community discussion surrounding this vulnerability.