RHSA-2025:13904MediumCVSS 6.5

Red Hat Security Advisory: RHOAI 2.23.0 - Red Hat OpenShift AI

Published
August 14, 2025
Last Modified
September 4, 2026

🔗 CVE IDs covered (1)

CVE-2025-43865 →

📋 Description

CVE-2025-43865 — react-router: React Router allows pre-render data spoofing on React-Router framework mode

🎯 Affected products43

  • Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:ff740fc3615edaa90dae976da1aa6455d64811e239eb66b422836a3aae791b41_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:6c224113a2be4fa3fdf49c91300068af94524de4217b6c0f76208ecb6eafdf91_ppc64le as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:712de283e471f1c52535e8d4d643378129d445f0c5c06692c88d0f97b1334b50_arm64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:912a805fdf39c378d42902ee360521e646c32a400ac7295939e67a6efb5e8729_s390x as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:b1a197147032f0b980dafeb3ec485168389d704db0d6c4f0b4d013966a768a3c_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:a4649e8ad4970bc3d5e967811c9694fa82d78ee9f8f025b8b2fbd37237eb14fc_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:ccfc84028a95f1cc6a16e06ff6e9ed2ace74f74e5e9963a4fb33544c2ce005c2_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:16ff53f4f1a1e1e66826c8355c654038da83df545427a931485ec7a2d3764b16_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:a1497e64349634b2567d28f685052de118f64f6b32e7d3ea469212e2004d7eb3_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:bb7c352ccc10a8c60ef8d573368d0ada59e73cd131653d11bcebdf9f564acc10_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:4847ac1be55284815670c2048c1edfc56c7227494280d3c6094aa23f1ed1a9d2_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:240692b86bc8a4fe0b545e6e4cd7cf4ff0ca990406bc55f0446d565fd67e37f6_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-kueue-controller-rhel9@sha256:84c3213e11299ec032aa0e5a4dfa9b3055c4246b04b029e888d8d9f1caf5c30c_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:1209715068edbda723f73913de4852c2d20f7530434061b10017916091fc2b13_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:1e447ae3c99fadb7a405a83c9fd206996cfa619de6efaa1505143a457ea00695_arm64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-llama-stack-k8s-operator-rhel9@sha256:626b9ef09ee82c8d425ddb7ed3f2ffbb3d1019f541e31604db891787c881d5c9_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-ml-pipelines-api-server-v2-rhel9@sha256:edcce7cddfa4c250108532e56541ddb95099612c180b2297e5934bc89d2bb46e_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:3243caa4c8aac75069d19225dcee361bf9c012782328a6266b7016b3026f6d56_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:da8debeb2b84a42aba0b98785ccc20e02ed520e125428fe012df3ca473cbb755_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9@sha256:5fb7e6c3ee1e3b170cd146ea9cd172fa953326b08163897605ca74a3644f2819_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-ml-pipelines-runtime-generic-rhel9@sha256:68e74bdf518fc624cc25a59a18b2a87d0aa2a9b8aad30750ace7115d297a21ca_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:756b7bdaa7f6e7c4a18488e690188dd91153a33913d225bab001b0085382e514_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:e50adae13e9d773e7be8bf81b7525dac3f5e3864c9cdf4c287342bd568ee1d6b_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-mm-rest-proxy-rhel9@sha256:467b04f4ee4118bbe0934d1ab8b80f72df8703dcdac61c2b53fdb5bd1b404c14_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:5233739875e07557e41ab9e1927f07f2b2531c2fd5605b666df32c6745823935_amd64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:6e51cca73e5efbe3a9577bf6128d796273146cda4680f1c636e4c846e000cb44_ppc64le as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:d904b0a8669c351b3097ae2df25e281a4cc4fdf98f685cf8e4ad883f3a9f8065_s390x as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:fa80ec2221f12cb88171d153d32073eade97d6ef1bc28a64c41155b0345a2afc_arm64 as a component of Red Hat OpenShift AI 2.23
  • registry.redhat.io/rhoai/odh-model-registry-operator-rhel9@sha256:e0c9ac73891781ef421e0a020cfd5c962f7632d38020897183cf048b1819326a_amd64 as a component of Red Hat OpenShift AI 2.23
  • +13 more not shown

✅ Remediation

For Red Hat OpenShift AI 2.23.0 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)