5.0
Moyenne
CVE-2025-12103 A flaw was found in Red Hat Openshift AI Service
Description
A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster. TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster Additionally users can access all `persistentvolumeclaims` and `lmevaljobs`
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift AI 3.0 3.0 | premières → < 3.0.0-1762251316 | 3.0.0-1762251316 |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées | |
| Red Hat OpenShift AI 2.25 1776243252 | premières → < 1776243252 | 1776243252 |
Références
- RHSA-2025:21117 access.redhat.com
- RHSA-2026:10184 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2405966 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat OpenShift AI 3.0
Les 23 CVE de Red Hat OpenShift AI 3.0 →
CVE-2026-114406
Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
6.8
Moyenne
CVE-2026-96889
Librsvg: use-after-free when xml includes have duplicated entities
7.8
Élevée
CVE-2026-96512
A flaw was found in sudo
7.8
Élevée
CVE-2026-74860
Libxml2: double-free/uaf in libxml2 python bindings
8.5
Élevée