CVE-2025-12805

  1. OpenCVE
  2. Vulnerabilities (CVE)
  3. CVE-2025-12805
A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.

8.1 /10

CVSS v3 : HIGH

V3 Legend

Vector :

Exploitability : 2.8 / Impact : 5.2

Attack Vector NETWORK

Attack Complexity LOW

Privileges Required LOW

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact NONE

Scope UNCHANGED

References
Link Resource
https://access.redhat.com/errata/RHSA-2026:2106 Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:2695 Vendor Advisory
https://access.redhat.com/security/cve/CVE-2025-12805 Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2413101 Exploit Issue Tracking Vendor Advisory
Configurations

Configuration 1 (hide)

cpe:2.3:a:redhat:openshift_ai:2.25:*:*:*:*:*:*:*
History

30 Apr 2026, 16:21

Type Values Removed Values Added
First Time Redhat
Redhat openshift Ai
CPE cpe:2.3:a:redhat:openshift_ai:2.25:*:*:*:*:*:*:*
References () https://access.redhat.com/errata/RHSA-2026:2106 - () https://access.redhat.com/errata/RHSA-2026:2106 - Vendor Advisory
References () https://access.redhat.com/errata/RHSA-2026:2695 - () https://access.redhat.com/errata/RHSA-2026:2695 - Vendor Advisory
References () https://access.redhat.com/security/cve/CVE-2025-12805 - () https://access.redhat.com/security/cve/CVE-2025-12805 - Vendor Advisory
References () https://bugzilla.redhat.com/show_bug.cgi?id=2413101 - () https://bugzilla.redhat.com/show_bug.cgi?id=2413101 - Exploit, Issue Tracking, Vendor Advisory

30 Mar 2026, 13:26

Type Values Removed Values Added
Summary
  • (es) Se encontró una falla en Red Hat OpenShift AI (RHOAI) llama-stack-operator. Esta vulnerabilidad permite el acceso no autorizado a los servicios de Llama Stack implementados en otros espacios de nombres a través de solicitudes de red directas, porque ninguna NetworkPolicy restringe el acceso al punto final del servicio llama-stack. Como resultado, un usuario en un espacio de nombres puede acceder a la instancia de Llama Stack de otro usuario y potencialmente ver o manipular datos sensibles.

26 Mar 2026, 22:16

Type Values Removed Values Added
New CVE
Information

Published : 2026-03-26 22:16

Updated : 2026-04-30 16:21

NVD link : CVE-2025-12805

Mitre link : CVE-2025-12805

CVE.ORG link : CVE-2025-12805

JSON object : View

Products Affected

redhat

  • openshift_ai
CWE
CWE-653

Improper Isolation or Compartmentalization