8.4
High
CVE-2025-12985 IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root…
Description
IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Licensing Operator image.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| IBM Licensing Operator | 9.2.0 | No fix stated |
| IBM Licensing Operator | 9.1.0 | No fix stated |
| IBM Licensing Operator 9.0 | 9.0.0 → 9.0.1 | No fix stated |