Read the docs
TI-2025-09818 Aliases CVE-2025-10725GHSA-g829-2387-h324

Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin

Priority MEDIUM 44CWE-266Published · Updated

Key facts

Attack vector
Network
Privileges required
Low
User interaction
None
Attack complexity
Low
Impact type
Privilege escalation
Confidentiality · integrity · availability
High · High · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-266.

Summary

A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows for the complete compromise of the cluster's confidentiality, integrity, and availability. The attacker can steal sensitive data, disrupt all services, and take control of the underlying infrastructure, leading to a total breach of the platform and all applications hosted on it.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00722 54th percentileScored 2026-11-07
Fix Fixed opendatahub-operator (opendatahub-io): 3.0.0Red Hat: 5 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Total

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
opendatahub-ioopendatahub-operatorbefore 3.0.03.0.0Patch availableCNA
Red HatRed Hat OpenShift AI 2.16—sha256:cebc8815e03b772343b15d0a7dce8fad6fcc71dd437d871db5a3691472350803Patch availableCNA
Red HatRed Hat OpenShift AI 2.19—sha256:43a8904396e55074ffb1afcfcd8fe6db0edcbc918a8ff8301b6b0920aea7eabfPatch availableCNA
Red HatRed Hat OpenShift AI 2.21—sha256:db339d2d4f86af4efa695ef193d19e26b25fec80017fa2780833a4cd944e383bPatch availableCNA
Red HatRed Hat OpenShift AI 2.22—sha256:dccc7c6cf920da7ffeadbad42f5727f2d58d54ceef399ac98441345d06ff10c4Patch availableCNA
Red HatRed Hat OpenShift AI 2.24—sha256:12c1d1066e75951aad1d333bcbc1675ba7a795b57744294c23decec1655709c7Patch availableCNA
  • opendatahub-operator Vendoropendatahub-io Affected before 3.0.0 Fixed in 3.0.0 Patch available CNA
  • Red Hat OpenShift AI 2.16 VendorRed Hat Affected — Fixed in sha256:cebc8815e03b772343b15d0a7dce8fad6fcc71dd437d871db5a3691472350803 Patch available CNA
  • Red Hat OpenShift AI 2.19 VendorRed Hat Affected — Fixed in sha256:43a8904396e55074ffb1afcfcd8fe6db0edcbc918a8ff8301b6b0920aea7eabf Patch available CNA
  • Red Hat OpenShift AI 2.21 VendorRed Hat Affected — Fixed in sha256:db339d2d4f86af4efa695ef193d19e26b25fec80017fa2780833a4cd944e383b Patch available CNA
  • Red Hat OpenShift AI 2.22 VendorRed Hat Affected — Fixed in sha256:dccc7c6cf920da7ffeadbad42f5727f2d58d54ceef399ac98441345d06ff10c4 Patch available CNA
  • Red Hat OpenShift AI 2.24 VendorRed Hat Affected — Fixed in sha256:12c1d1066e75951aad1d333bcbc1675ba7a795b57744294c23decec1655709c7 Patch available CNA

CPE names CNA · 5

CPEVersionsRoleVendor
cpe:/a:redhat:openshift_ai:2.16::el82.16—Red Hat
cpe:/a:redhat:openshift_ai:2.19::el82.19—Red Hat
cpe:/a:redhat:openshift_ai:2.21::el92.21—Red Hat
cpe:/a:redhat:openshift_ai:2.22::el92.22—Red Hat
cpe:/a:redhat:openshift_ai:2.24::el92.24—Red Hat
  • cpe:/a:redhat:openshift_ai:2.16::el8 Versions 2.16 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:2.19::el8 Versions 2.19 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:2.21::el9 Versions 2.21 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:2.22::el9 Versions 2.22 — ·Red Hat
  • cpe:/a:redhat:openshift_ai:2.24::el9 Versions 2.24 — ·Red Hat

Remediation

  • Fix · CNA opendatahub-operator (opendatahub-io) Fixed in 3.0.0

Red Hat 5 advisories

  • RHSA-2025:17501 Released 2025-10-07 · Red Hat rating Important
    RHOAI 2.24.0 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.24 registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-modelmesh-rhel9, registry.redhat.io/rhoai/odh-rhel9-operator
  • RHSA-2025:16984 Released 2025-09-29 · Red Hat rating Important
    RHOAI 2.19.3 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.19 registry.redhat.io/rhoai/odh-modelmesh-rhel8, registry.redhat.io/rhoai/odh-rhel8-operator
  • RHSA-2025:16982 Released 2025-09-29 · Red Hat rating Important
    RHOAI 2.22.2 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.22 registry.redhat.io/rhoai/odh-modelmesh-rhel9, registry.redhat.io/rhoai/odh-rhel9-operator
Show 2 more Red Hat advisories
  • RHSA-2025:16983 Released 2025-09-29 · Red Hat rating Important
    RHOAI 2.21.1 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.21 registry.redhat.io/rhoai/odh-modelmesh-rhel9, registry.redhat.io/rhoai/odh-rhel9-operator
  • RHSA-2025:16981 Released 2025-09-29 · Red Hat rating Important
    RHOAI 2.16.3 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.16 registry.redhat.io/rhoai/odh-modelmesh-rhel8, registry.redhat.io/rhoai/odh-rhel8-operator

Fixed in the same release

Records fixed by the same vendor advisory or release, as the CNA lists them.

  • Advisory ·

    Red Hat OpenShift AI 2.16, Red Hat OpenShift AI 2.19 and 3 more products — RHSA-2025:16981

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-35721 Openshift-ai: privilege escalation via excessive /etc/passwd permissionsPriority LOW 28
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat OpenShift AI 2.16, Red Hat OpenShift AI 2.19 and 3 more products — RHSA-2025:16982

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-35721 Openshift-ai: privilege escalation via excessive /etc/passwd permissionsPriority LOW 28
    Show all 2 records → Advisory →
Show 3 more groups
  • Advisory ·

    Red Hat OpenShift AI 2.16, Red Hat OpenShift AI 2.19 and 3 more products — RHSA-2025:16983

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-35721 Openshift-ai: privilege escalation via excessive /etc/passwd permissionsPriority LOW 28
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat OpenShift AI 2.16, Red Hat OpenShift AI 2.19 and 3 more products — RHSA-2025:16984

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-35721 Openshift-ai: privilege escalation via excessive /etc/passwd permissionsPriority LOW 28
    Show all 2 records → Advisory →
  • Advisory ·

    Red Hat OpenShift AI 2.16, Red Hat OpenShift AI 2.19 and 3 more products — RHSA-2025:17501

    2 records Highest priority Priority MEDIUM 1 MEDIUM, 1 LOW

    Other records, highest priority first

    • TI-2025-35721 Openshift-ai: privilege escalation via excessive /etc/passwd permissionsPriority LOW 28
    Show all 2 records → Advisory →

Vendor assessments

Red Hat

Red Hat rating: Important. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift AI 2.16Fixed RHSA-2025:16981
Red Hat OpenShift AI 2.19Fixed RHSA-2025:16984
Red Hat OpenShift AI 2.21Fixed RHSA-2025:16983
Red Hat OpenShift AI 2.22Fixed RHSA-2025:16982
Red Hat OpenShift AI 2.24Fixed RHSA-2025:17501
Not affected: 5 products
  • Red Hat OpenShift AI 2.16
  • Red Hat OpenShift AI 2.19
  • Red Hat OpenShift AI 2.21
  • Red Hat OpenShift AI 2.22
  • Red Hat OpenShift AI 2.24

Timeline

  1. 2026-10-02 Threatist record created from CVE-2025-10725
  2. 2026-10-03 Alias added: GHSA-g829-2387-h324

References

Advisory 5

Other 4

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences