Red Hat Open Shift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover

Summary: Red Hat disclosed CVE-2025-10725 in OpenShift AI, a flaw with a CVSS score of 9.9 out of 10.0 that Red Hat classified as "Important" rather than "Critical" because exploitation requires an authenticated account; per a Bugzilla report, an overly permissive ClusterRole lets any authenticated entity, including low-privileged service accounts for user workbenches, create OpenShift Jobs in any namespace, and an attacker can schedule a malicious Job in a privileged namespace such as openshift-apiserver-operator to exfiltrate a ServiceAccount token and reach root on cluster master nodes.
What you should know: The entry point is an ordinary data scientist's Jupyter notebook, and the stated outcome is a full cluster takeover that compromises the confidentiality, integrity, and availability of every application hosted on it. Red Hat revised its advisory as of October 6, 2025, with mitigations for those who cannot upgrade to version 2.16.3.

Read the original at The Hacker News ↗

Topics: Vulnerabilities & Patching
Mentions: CVE-2025-10725
Related: ⚡ Weekly Recap: Oracle 0-Day, Bit Locker Bypass, VMScape, WhatsApp Worm & More Cyber Risks ·
Attackers Exploit UnrealIRCd Flaw That Enables Server-Level Command Injection Cyber Risks · Nov 14, 2026
U.S. CISA adds Check Point and UnrealIRCd flaws to its Known Exploited Vulnerabilities catalog Cyber Risks · Nov 14, 2026