Known vulnerabilities in Red Hat OpenShift AI (RHOAI)

Vendor: Red Hat Inc.
Software: Red Hat OpenShift AI (RHOAI)
Software CPE: cpe:2.3:a:red_hat:red_hat_openshift_ai_rhoai:*:*:*:*:*:*:*:*
Website: https://www.redhat.com/en
Total vulnerabilities: 15
Public exploits: 1
Known exploited (KEV): 0
Highest CVSSv4 Score: 8.8

Breakdown by Severity Chart

Severity distribution of vulnerabilities affecting Red Hat OpenShift AI (RHOAI) Red Hat OpenShift AI (RHOAI) is affected by 15 known vulnerabilities: 2 high, 10 medium, 3 low Critical High Medium Low

Vulnerabilities (15)

Vulnerability CWE-ID CSH Severity Public Exploit KEV First fixed release Published Bulletins
#VU120189 - Insecure Default Initialization of Resource
CVE-2025-66416		 CWE-1188 Low
No
No
 2.25.1 18.12.2025 SB2025121831
SB2025121832
SB2026041041
and 1 more
#VU120186 - Deserialization of Untrusted Data
CVE-2025-9906		 CWE-502 High
No
No
 2.25.1 18.12.2025 SB2025121826
SB2025121832
SB2025122221
and 1 more
#VU119863 - Improper Authentication
CVE-2025-62593		 CWE-287 Medium
No
No
 2.25.1 11.12.2025 SB2025121148
SB2025121642
SB2025121832
#VU119403 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-62156		 CWE-22 Medium
No
No
 2.22.3 09.12.2025 SB2025120924
SB2025120925
#VU119402 - Improper Control of Dynamically-Managed Code Resources
CVE-2025-9905		 CWE-913 Medium
No
No
 2.22.3, 2.25.1 09.12.2025 SB2025112574
SB2025120925
SB2025121832
#VU119401 - Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')
CVE-2025-64756		 CWE-78 Medium
No
No
 2.25.1 09.12.2025 SB2025120922
SB2025120932
SB20251210178
and 18 more
#VU118830 - Memory corruption
CVE-2025-62164		 CWE-119 High
No
No
 2.25.1 28.11.2025 SB2025112850
SB2025121641
SB2025121642
and 3 more
#VU118764 - Deserialization of Untrusted Data
CVE-2025-49655		 CWE-502 Medium
No
No
 2.25.1 25.11.2025 SB2025112574
SB2025112575
SB2025121832
#VU118717 - Improper input validation
CVE-2025-47913		 CWE-20 Low
No
No
 2.25.1 24.11.2025 SB2025112448
SB2025112455
SB2025112456
and 53 more
#VU118557 - Improper Limitation of a Pathname to a Restricted Directory ('Path Traversal')
CVE-2025-12060		 CWE-22 Medium
No
No
 2.22.3, 2.25.1 17.11.2025 SB2025111724
SB2025120925
SB2025121832
and 2 more
#VU118190 - Resource exhaustion
CVE-2025-58183		 CWE-400 Medium
No
No
 2.22.3 07.11.2025 SB2025110705
SB2025110725
SB2025110726
and 172 more
#VU117790 - Loop with Unreachable Exit Condition ('Infinite Loop')
CVE-2025-62727		 CWE-835 Medium
No
No
 2.22.3, 2.25.1 29.10.2025 SB2025102946
SB2025102949
SB2025102950
and 11 more
#VU115167 - Allocation of Resources Without Limits or Throttling
CVE-2025-58754		 CWE-770 Medium
Available
No
 2.22.3 12.09.2025 SB2025091204
SB2025100104
SB2025100912
and 51 more
#VU114080 - Concurrent Execution using Shared Resource with Improper Synchronization ('Race Condition')
CVE-2025-47907		 CWE-362 Low
No
No
 2.22.3 14.08.2025 SB2025081423
SB2025081424
SB2025081425
and 48 more
#VU113069 - Inconsistent Interpretation of HTTP Requests ('HTTP Request Smuggling')
CVE-2025-53643		 CWE-444 Medium
No
No
 2.22.3, 2.25.1 18.07.2025 SB2025071857
SB2025090377
SB2025091303
and 15 more