CVE record · CVE-2025-10725

Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin

CVSS 9.9 CriticalCriticalEPSS 0.0072 · 54th percentile

Critical, because:

CVSS score 9.9: 9.0 or more.

Published by the CVE Program (CNA: redhat) at 30 Sept 2025, 17:47 UTC. agentprime has not analysed this yet, so whether it affects any app is not known. This CVE names a vendor and product rather than a package, so the lockfile check doesn’t match it.

Affected products, as the CNA wrote them
Vendor	Product	Versions
opendatahub-io	opendatahub-operator Package name: opendatahub-operator https://github.com/opendatahub-io/opendatahub-operator	affected before 3.0.0 semver Other versions: unaffected
Red Hat	Red Hat OpenShift AI 2.16 Package name: rhoai/odh-rhel8-operator https://catalog.redhat.com/software/containers/	unaffected sha256:cebc8815e03b772343b15d0a7dce8fad6fcc71dd437d871db5a3691472350803 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 2.19 Package name: rhoai/odh-rhel8-operator https://catalog.redhat.com/software/containers/	unaffected sha256:43a8904396e55074ffb1afcfcd8fe6db0edcbc918a8ff8301b6b0920aea7eabf to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 2.21 Package name: rhoai/odh-rhel9-operator https://catalog.redhat.com/software/containers/	unaffected sha256:db339d2d4f86af4efa695ef193d19e26b25fec80017fa2780833a4cd944e383b to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 2.22 Package name: rhoai/odh-rhel9-operator https://catalog.redhat.com/software/containers/	unaffected sha256:dccc7c6cf920da7ffeadbad42f5727f2d58d54ceef399ac98441345d06ff10c4 to before * rpm Other versions: affected
Red Hat	Red Hat OpenShift AI 2.24 Package name: rhoai/odh-rhel9-operator https://catalog.redhat.com/software/containers/	unaffected sha256:12c1d1066e75951aad1d333bcbc1675ba7a795b57744294c23decec1655709c7 to before * rpm Other versions: affected

Identifiers: CVE-2025-10725
CNA: redhat
Weakness (CWE): CWE-266
Tags: opendatahub-io opendatahub-operator
Red Hat OpenShift AI 2.16
Red Hat OpenShift AI 2.19
Red Hat OpenShift AI 2.21
Red Hat OpenShift AI 2.22
Red Hat OpenShift AI 2.24
Privilege escalation
Published: 30 Sept 2025
Updated: 24 Dec 2025

Not analysed yet

We haven’t published our own analysis of this CVE. If a person reviews it, this page will say what’s affected and what has to be true for it to matter.

Severity and exploitation

Score	Rating	CVSS	Vector	Source
9.9	Critical	3.1	CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H	CNA (redhat)

CISA KEV Not listed.
EPSS 0.0072, the 54th percentile, on 5 Nov 2026: FIRST’s estimate of the chance of exploitation in the next 30 days.

Timeline

This record came from the full history of the CVE Program, published 30 Sept 2025. New records show when each source confirmed them.

Sources

References from the CNA

access.redhat.com/errata/RHSA-2025:16981 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2025:16982 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2025:16983 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2025:16984 vendor-advisoryredhat
access.redhat.com/errata/RHSA-2025:17501 vendor-advisoryredhat
access.redhat.com/security/cve/CVE-2025-10725 vdb-entryredhat
bugzilla.redhat.com/show_bug.cgi?id=2396641 issue-trackingredhat
github.com/opendatahub-io/opendatahub-operator/commit/070057ebd0882be0e397bee1daa18c36374a03c0
github.com/opendatahub-io/opendatahub-operator/pull/2571

Facts on this page come from the CVE List as the CNA published them, with CVSS from the sources named above, CISA KEV and FIRST EPSS. Vendors, products and versions are shown as the CNA wrote them. We don’t reproduce the CVE’s description.