{"id":"CVE-2025-12548","aliases":["EUVD-2026-2332","GHSA-64f4-p4m8-4j89"],"status":"published","title":"Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333","description":"A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.","severity":{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna","from":"cve"},"epss":{"day":"2026-11-10","score":0.01297,"percentile":0.70626,"model":"v2026.06.15"},"facts":{"in_kev":false,"known_exploited":false,"public_exploit":true,"fix_available":false},"cwes":["CWE-306"],"published":"2026-01-13T15:35:01Z","modified":"2026-09-21T17:17:24Z","exploits":[{"source":"metasploit","id":"exploit/linux/http/eclipse_che_machine_exec_rce","title":"Eclipse Che machine-exec Unauthenticated RCE","type":"exploit","platform":"Linux,Unix","date":"2025-12-01","verified":true,"url":"https://www.rapid7.com/db/modules/exploit/linux/http/eclipse_che_machine_exec_rce"}],"products":[{"vendor":"red hat","product":"red hat openshift dev spaces (rhosds) 3.22"},{"vendor":"red hat","product":"red hat openshift dev spaces (rhosds) 3.23"},{"vendor":"red hat","product":"red hat openshift dev spaces (rhosds) 3.24"}],"references":[{"url":"https://access.redhat.com/errata/RHSA-2025:22620","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22623","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/errata/RHSA-2025:22652","tags":["vendor-advisory","x_refsource_REDHAT"]},{"url":"https://access.redhat.com/security/cve/CVE-2025-12548","tags":["vdb-entry","x_refsource_REDHAT"]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2408850","tags":["issue-tracking","x_refsource_REDHAT"]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2025-12548"},{"url":"https://github.com/advisories/GHSA-64f4-p4m8-4j89"}],"sources":{"cve":[{"id":"CVE-2025-12548","title":"Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333","description":"A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.","status":"published","published":"2026-01-13T15:35:01.329Z","modified":"2026-09-21T16:12:50.198Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"cna"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:32:41.743125Z"}],"euvd":[{"id":"EUVD-2026-2332","description":"A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.","status":"published","published":"2026-01-13T15:35:01Z","modified":"2026-09-21T16:12:50Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"updated_at":"2026-11-02T17:28:05.36994Z"}],"ghsa":[{"id":"GHSA-64f4-p4m8-4j89","title":"A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated...","description":"A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.","status":"published","published":"2026-01-13T18:31:03Z","modified":"2026-01-13T18:31:08Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T15:05:34.558577Z"}],"nvd":[{"id":"CVE-2025-12548","description":"A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.","status":"published","published":"2026-01-13T16:15:55.527Z","modified":"2026-09-21T17:17:24.24Z","cvss":[{"version":"3.1","score":9,"vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H","level":"critical","assessor":"secondary"}],"cwes":["CWE-306"],"updated_at":"2026-11-02T14:11:56.616231Z"}]}}