Vulnerability in Red Hat Openshift Ai 2.25
CVE-2025-12805
A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts acces…
EPSS: 0.004 (30.7th percentile) — read the EPSS interpretation.
CVSS v3 metric
CVSS v3 base score 8.1 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N.
Affected products
- Red Hat Openshift Ai 2.25 — versions sha256:c0d95dfbae20e87113ffb81026d379bb63ad300447df98b27d1bf9a83b084744, sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92
- Red Hat Openshift Ai (Rhoai)
- Redhat Openshift_ai — versions 2.25
Weakness classification (CWE)
References
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vendor-advisory, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, vdb-entry, Vendor Advisory)
- secalert@redhat.com (x_refsource_REDHAT, issue-tracking, Exploit, Issue Tracking, Vendor Advisory)
Frequently asked questions
- What is CVE-2025-12805?
- CVE-2025-12805 is a high-severity vulnerability in Red Hat Openshift Ai 2.25, classified under CWE-653. CVSS score: 8.1/10. Published 2026-03-26.
- How severe is CVE-2025-12805?
- High severity. CVSS v3 base score is 8.1 out of 10.