RHSA-2026:2106HighCVSS 8.7

Red Hat Security Advisory: RHOAI 2.25.2 - Red Hat OpenShift AI

Published
February 5, 2026
Last Modified
July 27, 2026

🔗 CVE IDs covered (15)

CVE-2025-12805 →CVE-2025-66034 →CVE-2025-66471 →CVE-2025-68156 →CVE-2025-69223 →CVE-2026-21441 →CVE-2026-24049 →CVE-2025-66506 →CVE-2025-68476 →CVE-2025-66626 →CVE-2025-12816 →CVE-2025-52881 →CVE-2025-66418 →CVE-2025-67725 →CVE-2025-67726 →

📋 Description

CVE-2025-12805 — llama-stack-k8s-operator: Llama Stack service exposed across namespaces due to missing NetworkPolicy CVE-2025-12816 — node-forge: node-forge: Interpretation conflict vulnerability allows bypassing cryptographic verifications CVE-2025-52881 — runc: opencontainers/selinux: container escape and denial of service due to arbitrary write gadgets and procfs write redirects CVE-2025-66034 — fonttools: fontTools: Arbitrary file write leading to remote code execution via malicious .designspace file CVE-2025-66418 — urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion CVE-2025-66471 — urllib3: urllib3 Streaming API improperly handles highly compressed data CVE-2025-66506 — github.com/sigstore/fulcio: Fulcio: Denial of Service via crafted OpenID Connect (OIDC) token CVE-2025-66626 — github.com/argoproj/argo-workflows: argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links CVE-2025-67725 — tornado: Tornado Quadratic DoS via Repeated Header Coalescing CVE-2025-67726 — tornado: Tornado Quadratic DoS via Crafted Multipart Parameters CVE-2025-68156 — github.com/expr-lang/expr: Expr: Denial of Service via uncontrolled recursion in expression evaluation CVE-2025-68476 — github.com/kedacore/keda: KEDA: Arbitrary file read vulnerability in Vault authentication CVE-2025-69223 — aiohttp: AIOHTTP's HTTP Parser auto_decompress feature is vulnerable to zip bomb CVE-2026-21441 — urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) CVE-2026-24049 — wheel: wheel: Privilege Escalation or Arbitrary Code Execution via malicious wheel file unpacking

🎯 Affected products200

  • Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:51403d59dbd78a41d75e7545b1e4aabd8d1bc0b2ccaafe529c4f48e1963a2035_s390x as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:5ad2b6d2f8d4904a0191fa5ccc18411a786e6579d188489fa12faf9fc068cc9c_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:88949919f0aabc891dad1fd98ab58df3a08790765295741a8645f3b5d8a285db_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:a389155782f92006e5bba65e46a895f7cf452686543a14b7b1fa52406f9058cd_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-caikit-nlp-rhel9@sha256:11e5cb6b52e2184b332d632d8d7ad2c6976a034f270274d37b28ce712bd2cc36_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-caikit-nlp-rhel9@sha256:70a961b976ef12b9986a68034d127cb9ba998ff75b64e877f9ee3a10f06f0106_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9@sha256:4c34b2d480f5ebd149fc4a0d1d6091a408cc7f1b258445805a1e4cbef3d7d0d2_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9@sha256:81157ed2f613acec8425198f643fc55071792deffce6d9aee3542c8ea07c4d1a_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:6331e14388d919390d1af6585eeff151b65ad4c9860745134def57dba26bb97e_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-codeflare-operator-rhel9@sha256:66615f22e0deca10743431636bad74e3ed4fb112dee8d0c3c8f27a380e38ae70_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:24f8d43160dc19c70e41cbbba12f688e1ac84a21077bf932aae7fea2ec24afb5_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:7c4110fe722576a3e8f65c4e6ae155be27e805b43e8ac8ca7ef82f3990a99874_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:8adc9de681e4d883ee9eac8b0fdcd2f2b1a22cb92ce90f8a63d46e30a7e5f61e_s390x as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:91389e1c6b30eebfc2f4a5c48bb2d499942b33d89a5419fc1903c180f0087cee_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:873dbf82b3b38ae1518019c143e403bed9dc1ecac199f850edff82b2b0f95231_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:c8fba2ae05c577c06c90364b6d94d92d5470c3150f07c001bbdfed40707220e2_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:f7933e6dc10f8169ae87369a3ff62bee34d43d8d1c838f7ae833d0908d54a45d_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:36e001b965f7eebd64b872def5c57231de0819469d7a26ea86df744f28c2785a_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:81ce7ecaafd32d352a24ac27dafd6afba1f124f734df7c4fa1864b757759a6bc_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:af3fa2677f47b424b7e8712505ef30e7ead5c445c77bc32360c4ff5c2ea24b93_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:2295017f41d6d273157b8f094074690f49521d3e0680580e26e37a9ab545d6fc_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:3eb5049152b666d5cf4bce10957e8ac31bc0a2e74a846d56f9fa15196108f1c2_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:4e4dc115dcb1061785653fcecbd2e81ff6089b62cf9ee0fda10eb87466047e39_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:14fde57a474874674cfafad3a508ac5645cd50c12c2a267d0235944a77803640_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:81c034b0d7ca5042b273697e7ff6a58c913cc1f9b514df46d44774b6346883a1_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:bf6ebf0abb38d3d5787f6e3ddf6e7ec2fd30d36c7607986cd8067b1099cbf571_amd64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:0ea130b6f98f7addc0128ac96e373dd685556ef1dbc8fa5400683f4b91425940_ppc64le as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:1e921ff8d31f51a8cf001e62f8ec3d4b999260ac0c6eafcc601d09a4ec4bdf3a_arm64 as a component of Red Hat OpenShift AI 2.25
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:915cb9d745de85847cb147bc34a8c95453bf54cd5c3747fbaefad66bba32b9d9_amd64 as a component of Red Hat OpenShift AI 2.25
  • +170 more not shown

✅ Remediation

For Red Hat OpenShift AI 2.25.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability. Workaround: Potential mitigations for this issue include: * Using rootless containers, as doing so will block most of the inadvertent writes (runc would run with reduced privileges, making attempts to write to procfs files ineffective). * Based on our analysis, neither AppArmor or SELinux can protect against the full version of the redirected write attack. The container runtime is generally privileged enough to write to arbitrary procfs files, which is more than sufficient to cause a container breakout. Workaround: To mitigate this issue, avoid processing untrusted .designspace files with the fontTools varLib script or any application that invokes fontTools.varLib.main(). Restrict the execution environment of processes handling .designspace files to minimize potential impact from arbitrary file writes. If the fonttools package is not required, consider removing it. Workaround: No mitigation is currently available that meets Red Hat Product Security’s standards for usability, deployment, applicability, or stability. Workaround: To mitigate this issue, applications using the `Expr` library should ensure that evaluation environments do not contain cyclic references. Additionally, externally supplied data structures must be validated or sanitized before being passed to `Expr` for evaluation. As a last-resort defensive measure, expression evaluation can be wrapped with panic recovery to prevent a full process crash.

🔗 References (19)