Critical severity · published Sep 30, 2025
CVE-2025-10725
Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin
9.9
CVSS
0.7%
EPSS
No
On KEV
Description
A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows for the complete compromise of the cluster's confidentiality, integrity, and availability. The attacker can steal sensitive data, disrupt all services, and take control of the underlying infrastructure, leading to a total breach of the platform and all applications hosted on it.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Changed
Exploitation
Is it being used?
Exploit prediction (EPSS)0.7% · higher than 54% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat OpenShift AI 2.16 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift AI 2.19 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift AI 2.21 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift AI 2.22 · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift AI 2.24 · Red Hat
All versions, or not specified · source: vendor
OP
opendatahub-operator · opendatahub-io
before 3.0.0 · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2025-10725
CVE.org
https://www.cve.org/CVERecord?id=CVE-2025-10725
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:16981
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:16982
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:16983
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:16984
access.redhat.com
https://access.redhat.com/errata/RHSA-2025:17501
access.redhat.com
https://access.redhat.com/security/cve/CVE-2025-10725
