CVE-2025-10725 Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin
Low-privileged users can escalate to cluster admin via overly permissive clusterroles, compromising the entire OpenShift AI platform.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2025-10725?
CVE-2025-10725 is a critical vulnerability in Red Hat OpenShift AI 2.16, published on 30 Sep 2025. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate their privileges to a full cluster administrator. This allows for the complete compromise of the cluster's confidentiality, integrity, and availability. The attacker can steal sensitive data, disrupt all services, and take control of the underlying infrastructure, leading to a total breach of the platform and all applications hosted on it.
Weakness: CWE-266
Which versions are affected by CVE-2025-10725?
How do I fix CVE-2025-10725?
No fix has been published for CVE-2025-10725 yet. Limit exposure of the affected software until one is available.
Is CVE-2025-10725 being exploited?
There is no known exploitation of CVE-2025-10725 in the wild and no public exploit code.
Public exploit code: 1 proofs of concept on GitHub.
Sources
Also known as GHSA-g829-2387-h324.