RHSA-2025:17501HighCVSS 9.9
Red Hat Security Advisory: RHOAI 2.24.0 - Red Hat OpenShift AI
🔗 CVE IDs covered (4)
📋 Description
CVE-2025-7783 — form-data: Unsafe random function in form-data CVE-2025-10725 — openshift-ai: Overly Permissive ClusterRole Allows Authenticated Users to Escalate Privileges to Cluster Admin CVE-2025-55163 — netty: netty-codec-http2: Netty MadeYouReset HTTP/2 DDoS Vulnerability CVE-2025-57852 — openshift-ai: privilege escalation via excessive /etc/passwd permissions
🔗 References (8)
- selfhttps://access.redhat.com/errata/RHSA-2025:17501
- externalhttps://access.redhat.com/security/cve/CVE-2025-10725
- externalhttps://access.redhat.com/security/cve/CVE-2025-55163
- externalhttps://access.redhat.com/security/cve/CVE-2025-57852
- externalhttps://access.redhat.com/security/cve/CVE-2025-7783
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2025/rhsa-2025_17501.json