Red Hat Openshift Sandboxed Containers 1.1 vulnerabilities

2 CVEs affecting Red Hat Openshift Sandboxed Containers 1.1, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-8941, published 2025-08-13.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-8941, published 2025-08-13. High severity, CVSS 7.8. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in linux-pam. The pam_namespace module may improperly handle user-controlled paths, allowing local users to exploit symlink attacks and race conditions to elevate their privileges to…
• CVE-2025-5791, published 2025-06-06. High severity, CVSS 7.1. EPSS: 0.2% chance of exploitation in the next 30 days. A flaw was found in the user's crate for Rust. This vulnerability allows privilege escalation via incorrect group listing when a user or process has fewer than exactly 1024 groups, leading to the…