Loading cryptocurrency prices...

Severe Privilege Escalation Flaw Found in Red Hat OpenShift AI

  • A high-severity security flaw was found in Red Hat OpenShift AI.
  • The flaw allows authenticated, low-privileged users to gain full administrative control over the system.
  • The issue carries a CVSS score of 9.9 out of 10, indicating critical potential impact.
  • Vulnerable versions include Red Hat OpenShift AI 2.19, 2.21, and RHOAI.
  • Red Hat advises restricting broad permissions and applying the principle of least privilege for job creation rights.

A significant security vulnerability was disclosed on October 1, 2025, affecting the Red Hat OpenShift AI platform. This flaw permits attackers with an authenticated account to escalate their privileges and potentially control the entire underlying infrastructure.

- Advertisement -

The vulnerability, designated as CVE-2025-10725, has a CVSS (Common Vulnerability Scoring System) rating of 9.9 out of 10, illustrating a near-critical risk level. Red Hat classified the issue as “Important” rather than “Critical” due to the requirement that the attacker must already possess valid user credentials.

According to Red Hat, “A low-privileged attacker with access to an authenticated account, for example, as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator.” This escalation could lead to complete compromise of the cluster’s confidentiality, integrity, and availability. Attackers may steal sensitive data, disrupt services, and take over the entire infrastructure, resulting in full platform and application breaches.

Affected software versions include Red Hat OpenShift AI 2.19, 2.21, and Red Hat OpenShift AI (RHOAI). The platform helps users manage Artificial Intelligence models across hybrid cloud environments, supporting tasks like data preparation, model training, and monitoring.

To mitigate this issue, Red Hat recommends avoiding broad permission grants to system-level groups. Specifically, it advises against associating the kueue-batch-user-role with the system:authenticated group via ClusterRoleBinding. Permissions to create jobs should be assigned more carefully and only to users or groups that need them, following the principle of least privilege.

- Advertisement -

For more details, users can visit the official security advisory on the Red Hat website here.

✅ Follow BITNEWSBOT on Telegram, Facebook, LinkedIn, X.com, and Google News for instant updates.

Previous Articles:

- Advertisement -

Latest News

S&P Rates Michael Saylor’s Strategy “B-” with Stable Outlook

Strategy, a company with significant Bitcoin holdings, received a “B-” credit rating in the...

Amazon (AMZN) to Lay Off 30,000 Workers Beginning October 28

Amazon plans to lay off up to 30,000 employees starting October 28, 2025.The job...

ETHZilla sells $40M ETH to fund $250M stock buyback plan

ETHZilla sold approximately $40 million worth of ether (ETH) from its treasury on October...

Participated in MegaETH’s token sale? Your social media engagement will influence your allocation – DL News

MegaETH has oversubscribed its $50 million token sale by more than six times.The project...

Trump Expected to Nominate New Fed Chair by End of 2025, Five Finalists

Five finalists have been identified for the next Federal Reserve Chair position. One more round...
- Advertisement -

Must Read

Top 10 Best Crypto Faucets To Earn Free Crypto

Are you looking to earn free cryptocurrency? Look no further! In this article, we will introduce you to the top 10 best crypto faucets...