Skip to contentRed Hat Openshift vulnerabilities
- red hat openshift container platform 4Ose-openshift-apiserver: openshift api server: server-side request forgery (ssrf) vulnerability in imagestreamimport mechanismCVE-2025-144436.4 Medium
- red hat openshift gitops, redhat-developer gitops-operator, red hat openshift gitops 1.16 +2 more +4 moreOpenshift-gitops-operator: openshift gitops: namespace admin cluster takeover via privileged jobsCVE-2025-13888Fix available9.1 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreNetworkmanager: networkmanager file accessCVE-2025-9615Fix available3.3 Low
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +27 more +29 moreGlib: integer overflow in glib gio attribute escaping causes heap buffer overflowCVE-2025-14512Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +26 more +28 moreGlib: glib: buffer underflow in gvariant parser leads to heap corruptionCVE-2025-14087Fix available5.6 Medium
- util-linux, red hat cert manager support for red hat openshift release 1.18, ceph storage 7 +11 more +13 moreUtil-linux: util-linux: heap buffer overread in setpwnam() when processing 256-byte usernamesCVE-2025-14104Fix available6.1 Medium
- red hat openshift serverless, build of apache camel - hawtio 4, build of apache camel 4 for quarkus 3 +29 more +31 moreUndertow: outofmemory when parsing form data encoding with application/x-www-form-urlencodedCVE-2024-3884Fix available7.5 High
- red hat openshift dev spacesCodeready-ws: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578506.4 Medium
- gnome glib, red hat ceph storage 8, discovery 2 +58 more +60 moreGlib: integer overflow in in g_escape_uri_string()CVE-2025-13601Fix available7.7 High
- red hat cert manager support for red hat openshift release 1.18, ceph storage 8, discovery 2 +11 more +13 moreGnutls: stack-based buffer overflow in gnutls_pkcs11_token_init() functionCVE-2025-9820Fix available4.0 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in net_set_vlanCVE-2025-54770Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal_exit command may lead to use-after-freeCVE-2025-61664Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: missing unregister call for normal commands may lead to use-after-freeCVE-2025-61663Fix available4.9 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 10.0 extended update support +23 more +25 moreGrub2: missing unregister call for gettext command may lead to use-after-freeCVE-2025-61662Fix available7.8 High
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: grub2: out-of-bounds write via malicious usb deviceCVE-2025-61661Fix available4.8 Medium
- gnu grub2, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreGrub2: use-after-free in grub_file_close()CVE-2025-54771Fix available4.9 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreQemu-kvm: stack buffer overflow in e1000 device via short frames in loopback modeCVE-2025-12464Fix available6.2 Medium
- astral uv, red hat ai inference server, ai inference server 3.2 +2 more +4 moreUv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentialsCVE-2025-13327Fix available6.3 Medium
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.0 +2 moreOpenshift-ai: trusty ai grants all authenticated users to list pods in any namespaceCVE-2025-121035.0 Medium
- red hat openshift virtualization 4, rhel-8-cnv-4.12, rhel-9-cnv-4.14 +4 more +6 moreContainer-native-virtualization: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578486.4 Medium
- latchset luksmeta, red hat enterprise linux 10, enterprise linux 7 +3 more +5 moreLuksmeta: data corruption when handling luks1 partitions with luksmetaCVE-2025-11568Fix available4.4 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: vfs_streams_xattr uninitialized memory write possibleCVE-2025-9640Fix available4.3 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreSamba: command injection in wins server hook scriptCVE-2025-10230Public exploitFix availableEPSS 39.8%10.0 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreLibxslt: type confusion in exsltfuncresultcompfunction of libxsltCVE-2025-11731Fix available3.1 Low
- red hat ceph storage 7, ceph storage 8, enterprise linux 10 +25 more +27 moreSssd: sssd default kerberos configuration allows privilege escalation on ad-joined linux systemsCVE-2025-11561Fix available8.8 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +13 more +15 moreQemu-kvm: vnc websocket handshake use-after-freeCVE-2025-11234Fix available7.5 High
- opendatahub-io opendatahub-operator, red hat openshift ai 2.16, openshift ai 2.19 +3 more +5 moreOpenshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster adminCVE-2025-10725Public exploit9.9 Critical
- red hat openshift ai 2.16, openshift ai 2.19, openshift ai 2.21 +2 more +4 moreOpenshift-ai: privilege escalation via excessive /etc/passwd permissionsCVE-2025-578526.4 Medium
- red hat discovery 2, enterprise linux 10, enterprise linux 10.0 extended update support +17 more +19 moreLibxslt: use-after-free with key data stored cross-rvtCVE-2025-10911Fix available5.5 Medium
- red hat openshift service mesh 3Surrealdb: surrealdb is vulnerable to unauthorized data exposure via live query subscriptionsCVE-2025-11060Fix available5.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +3 more +5 moreLibssh: memory exhaustion via repeated key exchange in libsshCVE-2025-8277Fix available3.1 Low
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 8.6 advanced mission critical update support +19 more +21 morePodman: podman kube play command may overwrite host filesCVE-2025-9566Fix available8.1 High
- red hat multicluster global hub, openshift serverless, advanced cluster management for kubernetes 2 +1 more +3 moreNx: nx/devkit: malicious versions of nx and plugins published to npmCVE-2025-10894Public exploit9.6 Critical
- red hat openshift pipelines, advanced cluster management for kubernetes 2, advanced cluster security 4 +12 more +14 moreGithub.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructureCVE-2025-11065Fix available5.3 Medium
- red hat openshift container platform 4Cri-o: large /etc/passwd file may lead to denial of serviceCVE-2025-44375.7 Medium
- red hat mirror registry for red hat openshiftMirror-registry: host header injection in mirror-registryCVE-2025-77776.5 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreQemu-kvm: uefi-vars: information disclosure vulnerability in uefi_vars_write callbackCVE-2025-8860Fix available3.3 Low
- red hat cert-manager operator for red hat openshift 1.16, compliance operator 1, discovery 2 +18 more +20 moreLinux-pam: incomplete fix for cve-2025-6020CVE-2025-8941Fix available7.8 High
- operator-framework operator-sdk, red hat multicluster engine for kubernetes, multicluster engine for kubernetes 2.6 +26 more +28 moreOperator-sdk: privilege escalation due to incorrect permissions of /etc/passwdCVE-2025-7195Fix available6.4 Medium
- red hat enterprise linux 10, enterprise linux 8, enterprise linux 9 +3 more +5 moreNetavark: podman: netavark may resolve hostnames to unexpected hostsCVE-2025-8283Fix available3.7 Low
- libssh, red hat enterprise linux 10, enterprise linux 6 +4 more +6 moreLibssh: null pointer dereference in libssh kex session id calculationCVE-2025-8114Fix available4.7 Medium
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +5 more +7 morePolkit: xml policy file with a large number of nested elements may lead to out-of-bounds writeCVE-2025-7519Fix available6.7 Medium
- red hat ceph storage 7, discovery 2, enterprise linux 10 +11 more +13 moreGnutls: null pointer dereference in _gnutls_figure_common_ciphersuite()CVE-2025-6395Fix available6.5 Medium
- gnome libxslt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 moreLibxslt: type confusion in xmlnode.psvi between stylesheet and source nodesCVE-2025-7424Fix available7.5 High
- gnome libxml2, red hat cert-manager operator for red hat openshift 1.16, openshift compliance operator 1 +48 more +50 moreLibxslt: libxml2: heap use-after-free in libxslt caused by atype corruption in xmlattrptrCVE-2025-7425Fix available7.8 High
- gnu gnutls, red hat ceph storage 7, discovery 2 +12 more +14 moreGnutls: vulnerability in gnutls certtool template parsingCVE-2025-32990Fix available6.5 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls sct extension parsingCVE-2025-32989Fix available5.3 Medium
- gnu gnutls, red hat ceph storage 7, discovery 2 +15 more +17 moreGnutls: vulnerability in gnutls othername san exportCVE-2025-32988Fix available6.5 Medium
- jenkins, jenkins openshift-sync-plugin, red hat openshift developer tools and services +2 moreJenkins-image: sensitive data disclosure when using openshift jenkins imageCVE-2024-94536.5 Medium
- ruby net-imap, red hat 3scale api management platform 2, enterprise linux 10 +17 more +19 morenet-imap vulnerable to STARTTLS stripping via invalid response timingCVE-2026-42246Fix available7.6 High
- Show moreLoading…