Database/AI/ML frameworks & serving
KServe ModelMesh: Group-writable `/etc/passwd` in the container image
CVE-2025-57852AI/ML frameworks & servingcurated
Impact
Group-writable /etc/passwd in the container image → privilege escalation inside the container
Who can reach it
Tenant with code execution in a ModelMesh pod
What to do
Rebuild the container images; no host patch. Provider owns the images if it ships a managed KServe
References
This entry is curated: imported from vendor advisories with machine assistance, not yet individually verified. Confirm against your vendor's advisory before acting, and report anything wrong.