{"id":111,"date":"2026-10-29T07:01:33","date_gmt":"2026-10-29T07:01:33","guid":{"rendered":"https:\/\/bugskan.com\/?p=111"},"modified":"2026-10-29T07:01:33","modified_gmt":"2026-10-29T07:01:33","slug":"openshift-ai-privilege-escalation-flaw-required-an-authenticated-account","status":"publish","type":"post","link":"https:\/\/bugskan.com\/index.php\/2026\/10\/29\/openshift-ai-privilege-escalation-flaw-required-an-authenticated-account\/","title":{"rendered":"OpenShift AI privilege-escalation flaw required an authenticated account"},"content":{"rendered":"<p>Red Hat\u2019s advisory for CVE-2025-10725 describes a privilege-escalation flaw in OpenShift AI. An attacker with an authenticated, low-privilege account could obtain cluster-administrator access, with consequences for applications and data across the cluster.<\/p>\n<p>Red Hat rates the issue Important, explaining that authentication is required. That prerequisite should remain visible alongside the high numerical severity score rather than being lost in an \u201cunauthenticated takeover\u201d headline.<\/p>\n<p>The advisory lists security errata for affected OpenShift AI streams. Operators should match their deployed stream and operator build to those errata, apply the corresponding fix and review unexpected changes to cluster permissions.<\/p>\n<p><a href=\"https:\/\/access.redhat.com\/security\/cve\/cve-2025-10725\">Read the original source<\/a>.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>CVE-2025-10725 could turn low-privilege access into cluster administration; Red Hat rates the issue Important.<\/p>\n","protected":false},"author":2,"featured_media":0,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"bugskan_incident_id":"inc_143fbf1bb5dafc","bugskan_event_type":"vulnerability","bugskan_response":"REVIEW","bugskan_technical_severity":"","bugskan_technical_severity_source":"","bugskan_evidence_quality":"high","bugskan_affected_scope":"Affected OpenShift AI operator builds listed by Red Hat.","bugskan_recommended_next_step":"Apply the security erratum for your supported OpenShift AI stream.","bugskan_who_should_check":"","bugskan_material_updated_at":"2025-09-29T00:00:00Z","bugskan_reviewer_name":"","bugskan_reviewed_at":"","bugskan_legacy_state":"mapped","bugskan_featured":false,"bugskan_sample":false,"footnotes":""},"categories":[1],"tags":[],"bugskan_format":[2],"bugskan_technology":[40],"class_list":["post-111","post","type-post","status-publish","format-standard","hentry","category-uncategorized","bugskan_format-security-brief","bugskan_technology-red-hat-openshift-ai"],"_links":{"self":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/111","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/users\/2"}],"replies":[{"embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/comments?post=111"}],"version-history":[{"count":1,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/111\/revisions"}],"predecessor-version":[{"id":336,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/posts\/111\/revisions\/336"}],"wp:attachment":[{"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/media?parent=111"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/categories?post=111"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/tags?post=111"},{"taxonomy":"bugskan_format","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_format?post=111"},{"taxonomy":"bugskan_technology","embeddable":true,"href":"https:\/\/bugskan.com\/index.php\/wp-json\/wp\/v2\/bugskan_technology?post=111"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}