CVE-2025-12805

HIGH

Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy

Title source: cna
STIX 2.1

Description

A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.

References (4)

Core 4
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:2106
https://access.redhat.com/errata/RHSA-2026:2106
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:2695
https://access.redhat.com/errata/RHSA-2026:2695
Vdb Entry, X_Refsource_Redhat vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2025-12805
Issue Tracking, X_Refsource_Redhat issue-tracking x_refsource_redhat
RHBZ#2413101
https://bugzilla.redhat.com/show_bug.cgi?id=2413101

Scores

CVSS v3 8.1
EPSS 0.0001
EPSS Percentile 2.9%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-653
Status published
Products (4)
Red Hat/Red Hat OpenShift AI (RHOAI)
Red Hat/Red Hat OpenShift AI 2.25 sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92
Red Hat/Red Hat OpenShift AI 2.25 sha256:c0d95dfbae20e87113ffb81026d379bb63ad300447df98b27d1bf9a83b084744
redhat/openshift_ai 2.25
Published Mar 26, 2026
Tracked Since Mar 27, 2026