6.1
Medium
CVE-2025-5417 An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image
Description
An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container image and modify the image's content. This issue affects the confidentiality and integrity of the data, and any changes made are not permanent, as they reset after the pod restarts.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Developer Hub 1.7 | earliest → < 1.7.0 | 1.7.0 |
| Red Hat Developer Hub 1.7 | Versions not published |
References
- RHSA-2025:14090 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2369602 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat Developer Hub
The 81 CVEs of Red Hat Developer Hub →
CVE-2026-114236
storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a…
3.3
Low
CVE-2026-92925
Redis: redis: out-of-bounds read via crafted cluster bus packets
7.1
High
CVE-2026-13676
fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs
7.5
High
CVE-2026-9697
Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or…
7.4
High