Aller au contenu
en Se connecter
8.1 Élevée

CVE-2025-12805 A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator

Description

A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.

Produits et versions touchés

Produit Versions touchées Corrigé en
Red Hat OpenShift AI 2.25 Versions non publiées
Red Hat OpenShift AI (RHOAI) Versions non publiées

Références

Chronologie

  1. Publiée
  2. Dernière modification

Autres CVE de Red Hat OpenShift AI 2.25

Les 140 CVE de Red Hat OpenShift AI 2.25 →
CVE-2026-86332 A flaw was found in odh-dashboard in Red Hat OpenShift AI 6.5 Moyenne CVE-2026-18620 A flaw was found in Data Science Pipelines 7.1 Élevée CVE-2026-18618 A flaw was found in ml-metadata 7.5 Élevée CVE-2026-18611 A flaw was found in the Data Science Pipelines Operator 7.5 Élevée
Suivre cette CVE