Tuesday, August 11, 2026
LIVEThe Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///The Unrelenting Cyber Battle: Hacking Threats and the Imperative of Robust Data Protection///Navigating the Cyber Labyrinth: Bolstering Defenses Against Evolving Hacking Threats///The Dual Front War: Battling Hacking and Bolstering Data Protection in the Digital Age///The Ever-Evolving Cyber Threat Landscape: Navigating Hacking and Fortifying Data Protection///The Unseen Battle: Fortifying Data in an Age of Relentless Hacking///The Unseen War: Hacking's Relentless Advance and the Imperative of Data Protection///The Evolving Threat Landscape: Hacking, Data Protection, and the Imperative for Proactive Security///Navigating the Digital Minefield: Bolstering Data Protection in an Era of Relentless Hacking///The Dual Fronts of Digital Defense: Combating Hacking and Fortifying Data Protection///Hacking's New Frontier: Fortifying Data Protection in the Age of Advanced Cyber Threats///The Dual Front: Navigating Hacking Threats and Fortifying Data Protection in the Digital Age///Navigating the Digital Gauntlet: The Evolving Nexus of Hacking and Data Protection///
Subscribe
Cyber Security
Independent · Digital
Thehackingpost
RSSSubscribe
CybersecurityAI-assisted

Red Hat Openshift AI Service Vulnerability Allow Attackers to Take Control of the Infrastructure

Red Hat has issued a security advisory, CVE-2025-10725, identifying an important vulnerability in the OpenShift AI Service. This flaw allows low-privileged users to escalate their permissions to full cluster administrator, potentially compromising the…

CBy Carter HartwellOct 01, 20252 min read

Red Hat has issued a security advisory, CVE-2025-10725, identifying an important vulnerability in the OpenShift AI Service. This flaw allows low-privileged users to escalate their permissions to full cluster administrator, potentially compromising the entire platform.

The vulnerability carries a CVSS v3 base score of 9.9, indicating a critical risk for organizations utilizing Red Hat OpenShift AI for machine learning tasks.

Privilege Escalation Vulnerability (CVE-2025-10725)

The vulnerability originates from an overly permissive ClusterRoleBinding, which connects the kueue-batch-user-role with the system:authenticated group.

In standard deployments, authenticated users, such as data scientists, typically access Jupyter notebooks and AI pipeline features with limited privileges.

By exploiting this configuration, an attacker can use the batch.kueue.openshift.io API to create arbitrary Job and Pod resources.

This allows execution of malicious containers or init-containers that perform oc or kubectl commands, facilitating privilege elevation within the cluster by binding newly created service accounts to roles with higher privileges.

This escalation can lead to the attacker assuming the cluster-admin role, granting unrestricted access to all cluster objects, which could result in data theft, service disruption, and full infrastructure control.

Red Hat has issued a security advisory, CVE-2025-10725, identifying an important vulnerability in the OpenShift AI Service.
Carter Hartwell · Thehackingpost

Risk Factors Details

Affected Products Red Hat OpenShift AI 2.19 (RHEL 8), Red Hat OpenShift AI 2.21 (RHEL 9), registry.redhat.io/rhoai/odh-rhel8-operator, registry.redhat.io/rhoai/odh-rhel9-operator

Impact Privilege escalation

Exploit Prerequisites Valid authenticated user account, Access to OpenShift AI Service, Low-privileged account, Access to Jupyter notebook or similar interface, Ability to interact with batch.kueue.openshift.io API

CVSS 3.1 Score 9.9 (Critical)

Red Hat has released fixes through the following errata, updating the OpenShift AI Operator for Red Hat Enterprise Linux 8 and 9:

Advertisement

RHBA-2025:16984 (OpenShift AI 2.19 on RHEL 8) RHBA-2025:16983 (OpenShift AI 2.21 on RHEL 9)

Administrators are advised to apply these updates immediately. As an interim measure, prior to patching, the problematic ClusterRoleBinding should be removed.

Subsequently, job-creation permissions should be explicitly granted to trusted identities, enforcing the Principle of Least Privilege, ensuring only authorized users or groups can submit AI jobs.

Red Hat categorizes CVE-2025-10725 as Important, rather than Critical, due to the requirement of a valid authenticated account, albeit with low privileges.

However, the potential impact remains significant. Organizations utilizing Red Hat OpenShift AI are urged to address this vulnerability promptly to prevent a complete cluster compromise and to maintain stringent RBAC configurations.

Based on reporting by Cyber Security News.

AI transparency. This article was produced with the assistance of artificial intelligence and published under human editorial oversight. AI systems can make mistakes. Read how we use AI (EU AI Act, Art. 50).
Related Stories
Cybersecurity

Why Fintech Banking Platforms Are Reducing Operational Costs by 40%

Paige Monroe · Mar 26, 2026
Cybersecurity

Dogecoin Price Prediction: SHIB Burns 172M Tokens as Pepeto Exchange Earns From Every Trade

Eric Wallace · Mar 26, 2026
Cybersecurity

Solana Price Prediction: SOL Holds $86 With Commodity Status as Pepeto Targets Bigger Returns

Zachary Burns · Mar 26, 2026
Cybersecurity

Open Directory Malware Campaign Uses Obfuscated VBS, PNG Loaders and RAT Payloads

Joseph Cain · Mar 26, 2026