CVE-2025-12103

MediumCVSS 5.0/10Last modified Oct 18, 2026

Description

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster.

TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster

Additionally users can access all `persistentvolumeclaims` and `lmevaljobs`

Metrics

CVSS 3.1 5.0/10CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N

Weakness enumeration

CWE-266

Affected software

Vendor	Product	Versions
Red Hat	Red Hat OpenShift AI 2.25	—
Red Hat	Red Hat OpenShift AI 3.0	—
Red Hat	Red Hat OpenShift AI (RHOAI)	—

References

Timeline

Published: Oct 28, 2025
Last modified: Oct 18, 2026
NVD status: Deferred

Related CVEs from 2025

CVE-2025-121049.8Outdated and Vulnerable UI Dependencies might potentially lead to exploitation.This issue affects BLU-IC2: through 1.19.5; BLU-IC4: through CVE-2025-121057.5A flaw was found in the asynchronous message queue handling of the libsoup library, widely used by GNOME and WebKit-based applications to ma CVE-2025-121069.1Insufficient argument validation in OpenVPN 2.7_alpha1 through 2.7_rc1 allows an attacker to trigger a heap buffer over-read when parsing IP CVE-2025-121077.2The Velocity template engine, utilized by the affected product, accepts and processes template syntax without sufficient sanitization or val CVE-2025-121089.3The Survision LPR Camera system does not enforce password protection by default. This allows access to the configuration wizard immediately CVE-2025-121096.4The Header Footer Script Adder – Insert Code in Header, Body & Footer plugin for WordPress is vulnerable to Stored Cross-Site Scripting via CVE-2025-12116.5Versions of the package hackney before 1.21.0 are vulnerable to Server-side Request Forgery (SSRF) due to improper parsing of URLs by URI bu CVE-2025-121105.4A flaw was found in Keycloak. An offline session continues to be valid when the offline_access scope is removed from the client. The refresh CVE-2025-121126.4The Insert Headers and Footers Code – HT Script plugin for WordPress is vulnerable to Stored Cross-Site Scripting via adding scripts in all CVE-2025-121134.3The Alt Text Generator AI – Auto Generate & Bulk Update Alt Texts For Images plugin for WordPress is vulnerable to unauthorized loss of data CVE-2025-121145.5Enabled serial console could potentially leak information that might help attacker to find vulnerabilities.This issue affects BLU-IC2: throu CVE-2025-121157.5The WPC Name Your Price for WooCommerce plugin for WordPress is vulnerable to unauthorized price alteration in all versions up to, and inclu