RHSA-2025:23531HighCVSS 8.8

Red Hat Security Advisory: RHOAI 2.25.1 - Red Hat OpenShift AI

Published
December 17, 2025
Last Modified
August 24, 2026

🔗 CVE IDs covered (12)

CVE-2025-62727 →CVE-2025-66416 →CVE-2025-9906 →CVE-2025-47913 →CVE-2025-53643 →CVE-2025-64756 →CVE-2025-9905 →CVE-2025-12060 →CVE-2025-12638 →CVE-2025-49655 →CVE-2025-62164 →CVE-2025-62593 →

📋 Description

CVE-2025-9905 — keras: Arbitary Code execution in Keras load_model() CVE-2025-9906 — keras: Arbitrary Code execution in Keras Safe Mode CVE-2025-12060 — keras: Keras Path Traversal Vulnerability CVE-2025-12638 — keras: Path Traversal Vulnerability in keras CVE-2025-47913 — golang.org/x/crypto/ssh/agent: golang.org/x/crypto/ssh/agent: SSH client panic due to unexpected SSH_AGENT_SUCCESS CVE-2025-49655 — keras: Keras deserialization of untrusted data CVE-2025-53643 — aiohttp: AIOHTTP HTTP Request/Response Smuggling CVE-2025-62164 — vllm: VLLM deserialization vulnerability leading to DoS and potential RCE CVE-2025-62593 — ray: Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack CVE-2025-62727 — starlette: Starlette DoS via Range header merging CVE-2025-64756 — glob: glob: Command Injection Vulnerability via Malicious Filenames CVE-2025-66416 — mcp: DNS Rebinding Protection Disabled by Default in Model Context Protocol Python SDK

🎯 Affected products200

  • Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:030379c0fb216de4f871c3fb09ab5acc4996f0be1da03fdb1b1726bb60a31554_s390x as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:4bb82618be2cbe60f5cf217f9bcfa7d6fb502dec6df1f74927599587d495a6ed_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:61be3bb9acacaf593b5a5a0b56092ab294785a263eaab08edae23f5004be4564_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:a1d4653800999c98ec87350ca750f927740ec0e5a04ae0eabac9792f0b2cd54a_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-caikit-nlp-rhel9@sha256:853f7b134c4260b6fb62761dc2548056e0a64f723e6a516aa171ed9bad21266f_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-caikit-nlp-rhel9@sha256:dc9d108d820d3bd6aa0a2402bc9cc8e1fc1b02fb4ee44dea24f0cb6839a79d5a_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9@sha256:4be08cd9e572420854f3a5cf30884219385821737ec7d867db85ac58bf952093_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9@sha256:6cdd7fbb536a4175e8cfe3e7eb72e83740f105522fb3acc5cbec713445399d40_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:82354d2dba5f494dc39f2d5e5429d3ca0bac0155f93e1aacec90fcf082e25213_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:d8c5c1e8e78ab403f40233b867fa7433543e959306e467921a02c2ca65585a23_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:0b266bd9c742ec91c3a49b27201d01a804718d0e1666803e361926f525dc0c1d_s390x as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:0d48aae610f3fa1cbe703f5434e18ec7e7d637adccdf1748c49d2e8272e7ec1d_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:b5e8a05fc03614409959eb9a5a45fb98f74d053bcbebc680facd6ae27e983d98_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:fa525f5211d4db4d909712ba39546fc3fd95f97f4a5f845b91937066e726f204_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:1d1bbdfdffaa1006fc6169bea9bab72c804f03ad3c4264e504992afdf01f1908_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:44ce670908a077d8e508aa59ac05dcd6d0566c78713c4c1910442caa65f1bda9_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:6bb341d0ebec1f7776283939f5b3eb9768a7d04b9bf817d6248c7df7e3fecee7_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:2af692f7b672b6206d7efcfe0179628b73d27da52b7ef1f6449a4e11b2bac19e_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:85b1677537ed8fc1471f0053e1d6e281023ed4685c635de78fdbc00b1b63539b_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:fc0d459c4e8ade0a9e70b9244213ba27e838103a3a25de5d2435a4c985fbb518_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:63d87c365043d99c0152afb67a1726e135a4986a5f8845f66a1b29a7cdfb16f9_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:f8ca7935c91a91dc6e51b99474ceabd8d884bda7fe64957d0c0f27f80f78ba31_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:fd7f13d12e2eee457fa09787ac46d19440eb08dbc55738c0a2bb9a5b9137b7f5_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:9e9d846c28dab35a944a556211847fb0ec64602d9c1765813f31dfc3c8bbcaef_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:c32e40dd9628e71cdb54ad055422ec74b140cc8ebcbd88e0d09b419bda1d0ca9_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:f7ccaf3c390c1d3302ee9ba4cdc1c081ea8b23f7b7978d5c45806c21d5b2f236_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:70a105d801d6d7686a20fb3ce1c52ed4a90d2e8584e77ca96ef62dc02031e1a8_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:97ff0fe1d0c932e2de0efbcfa948f2e7dd4e2098fc5cd85422eeb3515d768d47_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:fc53c992d479524272b81b628f62e71236748aece361d40d1fe590a9352f2ff4_arm64 as a component of Red Hat OpenShift AI 2.25
  • +170 more not shown

✅ Remediation

For Red Hat OpenShift AI 2.25.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability. Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this issue, avoid using the `glob` command-line interface with the `-c` or `--cmd` option when processing filenames from untrusted sources. If programmatic use of `glob` is necessary, ensure that filenames are thoroughly sanitized before being passed to commands executed with shell interpretation enabled.

🔗 References (16)