CVE-2025-10725 – A privilege escalation vulnerability in Red Hat... (How to Fix)

Q: What is the severity of CVE-2025-10725?

CVE-2025-10725 has a CVSS score of 9.9 (CRITICAL). A privilege escalation vulnerability in Red Hat OpenShift AI Service allows authenticated low-privileged users (like data scientists using Jupyter notebooks) to gain full cluster administrator privileges. This affects all OpenShift AI deployments where users have authenticated access. The vulnerability enables complete cluster compromise.

📋 TL;DR

A privilege escalation vulnerability in Red Hat OpenShift AI Service allows authenticated low-privileged users (like data scientists using Jupyter notebooks) to gain full cluster administrator privileges. This affects all OpenShift AI deployments where users have authenticated access. The vulnerability enables complete cluster compromise.

💻 Affected Systems

Products:

Red Hat OpenShift AI Service

Versions: Specific versions referenced in RHSA advisories (check linked errata)

Operating Systems: Linux

Default Config Vulnerable: ⚠️ Yes

Notes: Requires authenticated access to OpenShift AI Service, typically via Jupyter notebook or similar interface.

⚠️ Manual Verification Required

This CVE does not have specific version information in our database, so automatic vulnerability detection cannot determine if your system is affected.

Why? The CVE database entry doesn't specify which versions are vulnerable (no version ranges provided by the vendor/NVD).

🔒 Custom verification scripts are available for registered users. Sign up free to download automated test scripts.

Recommended Actions:

Review the CVE details at NVD
Check vendor security advisories for your specific version
Test if the vulnerability is exploitable in your environment
Consider updating to the latest version as a precaution

⚠️ Risk & Real-World Impact

🔴

Worst Case

Complete cluster takeover allowing data theft, service disruption, infrastructure control, and compromise of all hosted applications.

🟠

Likely Case

Privileged attacker escalates to cluster admin, accesses sensitive data, and potentially deploys malicious workloads.

🟢

If Mitigated

Limited impact if strict network segmentation and least privilege access controls prevent lateral movement.

🌐 Internet-Facing: HIGH

🏢 Internal Only: HIGH

🎯 Exploit Status

Public PoC: ✅ No

Weaponized: UNKNOWN

Unauthenticated Exploit: ✅ No

Complexity: LOW

Exploitation requires authenticated access but appears straightforward based on CVSS and description.

🛠️ Fix & Mitigation

✅ Official Fix

Patch Version: Check specific RHSA-2025:16981 through RHSA-2025:17501 for exact fixed versions

Vendor Advisory: https://access.redhat.com/errata/RHSA-2025:16981

Restart Required: Yes

Instructions:

1. Review all linked RHSA advisories. 2. Apply the appropriate patches for your OpenShift AI version. 3. Restart affected services. 4. Verify patch application.

🔧 Temporary Workarounds

Restrict Jupyter notebook access

all

Limit access to Jupyter notebooks and OpenShift AI interfaces to only essential users

Implement network segmentation

all

Isolate OpenShift AI components from critical cluster infrastructure

🧯 If You Can't Patch

Immediately restrict all non-essential user access to OpenShift AI interfaces
Implement enhanced monitoring for privilege escalation attempts and cluster admin activities

🔍 How to Verify

Check if Vulnerable:

Check OpenShift AI version against affected versions in RHSA advisories

Check Version:

oc get pods -n redhat-ods-applications -l app=rhods-dashboard -o jsonpath='{.items[0].spec.containers[0].image}'

Verify Fix Applied:

Verify OpenShift AI version matches patched versions from RHSA advisories

📡 Detection & Monitoring

Log Indicators:

Unexpected privilege escalation events
Cluster admin activities from non-admin users
Unauthorized access to sensitive resources

Network Indicators:

Unusual API calls to cluster administration endpoints from user namespaces

SIEM Query:

source="openshift-audit-logs" AND (event="authorization" AND result="allow" AND verb IN ("create","update","delete","patch") AND resource="clusterroles")

📊 Metadata

CVE ID: CVE-2025-10725

CVSS v3 Score: 9.9 (CRITICAL)

CVSS Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H

CWE: CWE-266

EPSS Score: 0.15% exploit probability (35.3th percentile)

Published: September 30, 2025

Last Updated: December 24, 2025

🔗 References

📤 Share & Export

📄 Export Markdown 📋 Export JSON

🔗 Related Vulnerabilities

If you're affected by CVE-2025-10725, you might also want to check these: