RHSA-2025:21117MediumCVSS 5.0

Red Hat Security Advisory: RHOAI 3.0 - Red Hat OpenShift AI

Published
November 12, 2025
Last Modified
August 15, 2026

🔗 CVE IDs covered (1)

CVE-2025-12103 →

📋 Description

CVE-2025-12103 — openshift-ai: Trusty AI Grants All Authenticated users to list pods in any namespace

🎯 Affected products200

  • Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:4939bd47cd86e86b8d7858d0fd940ecb83164670f32f9fe26315815a3a5bce1a_s390x as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:9e1a6844d914eed3db921d36cf1b44762f3696a2e2eb80f365018380088f3b73_ppc64le as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:abf8abff702e9f2c620fb9f30ab142921e443227411d6aa6bee737ef4811790d_amd64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:e8d9c6b0d930f2de541370ac00fc2c2ca614912f4d0a909845a9c458d8df252c_arm64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:433e085c661e2ceefdc9e7537ad475bcd2250b760d5b89dd3af7e42c503d74de_s390x as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:51e13c9a9d027780120af3ef82d4807996b9b2f2d7002f96544830cd21b0a4db_arm64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:d1f7a6814eb47fb5fa1cca41cceb68a5d1cddbc54f34d2f67d5bc71f43dc0f4e_ppc64le as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f977f9605d76073d05271c2c2feffe825693fb6fbb6ede84a4b2f3786332e6df_amd64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:0329704800c7083a5bf23c8d599c91b22add4792c891c1901de8f2752188e380_arm64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:23fb5ea477dc29d731a79f0cc9f9b02d4a7edc6a4f48d74a81e9d04f964af528_ppc64le as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:fc98e1f49c9c29bc7386672cd9fd39218684123eea8cac42ae82890c028937eb_amd64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:2bb0bec8127462ebb092fe8f5f590430a39d974644337b4efdbb1e46580d542c_ppc64le as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:94cf2a98e85dc38cfdf7324ec1b1a2aa2b2dbfcefedf9a369a59dcefa62df4e0_amd64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:d6ee780bdd4d8e3673e5fb18ad0ae89e276501d87f2ff7bb63ed5cc4fbec3b31_arm64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:4facbf5cd22db377df6ae112516a627b0570504b884e45af598f5d6b07625c51_ppc64le as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:b44ac78752b6899c4e2f1ea93d4c166fa8627a9d7888d3a4b1dc2328aafad768_arm64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:ec7c903e6515e17d13ee373b812d6602a8039079392b2cd8db34fbec783b71f9_amd64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:65ec493e609f5cf2e738658b821fbbdff8694b4762801993121b9074463c8ad8_arm64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:7d5fac75acea452398b75537dc0789005fae13a825819091930a34ffd5f395ea_amd64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:7f32438102a5adbdb02f5ba1291ed54dd7b71118df989e75f1fcb899d780c9de_ppc64le as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:bbd3c2161bc7ac4a5f0193d2ddabf5afd145be26f7f6793c55fe3e3676744db3_amd64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:c830de605fddd49b6e1eca4fbc7b51e8db9053321d882a63b4312c372bb238b6_arm64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:edc51272715fe1763a71799a251f6fd89e224e2e694f12678bcb6cf858f15801_ppc64le as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:752ce1e24cc0adedc4d700b1ecadcb4d093cafb891ae958ae44b573369edfe89_arm64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:903a18a2c9d19046170fa0580d243483129347b287267daa50e07d620354cbf7_amd64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:a6dd551195a859db5420b91b37d7b65a9ae1f0f5500125951a8446cbeb00a93b_s390x as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:f0dd7520afa1b74ad2dd99d00ec78f82c9332e1268a64feb85bdab5181416097_ppc64le as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-guardrails-detector-huggingface-runtime-rhel9@sha256:5897f9bd8c6735fd49f7adbc1bcb66dff8df798397d8a43dcf72e20bfb9bbfa5_arm64 as a component of Red Hat OpenShift AI 3.0
  • registry.redhat.io/rhoai/odh-guardrails-detector-huggingface-runtime-rhel9@sha256:6502e9bd613a1effbebc4e0d8f51313eca2b737899a7f03673c82cb1dfa087a7_ppc64le as a component of Red Hat OpenShift AI 3.0
  • +170 more not shown

✅ Remediation

For Red Hat OpenShift AI 3.0 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability.

🔗 References (5)