Red Hat OpenShift Enterprise 3.2 and OpenShift Origin allow remote authenticated users to execute commands with root privileges by changing the root password in an sti builder image.
https://github.com/openshift/origin/pull/7864
https://euvd.enisa.europa.eu/vulnerability/EUVD-2016-3252