Red Hat OpenShift AI Flaw Exposes Hybrid Cloud Infrastructure to Full Takeover

A severe security flaw has been disclosed in Red Hat OpenShift AI that could allow attackers to escalate privileges and take full control of the infrastructure under certain conditions, according to Red Hat. The vulnerability is tracked as CVE-2025-10725 and carries a CVSS score of 9.9 out of 10. Red Hat has classified the issue as Important rather than Critical because a remote attacker must be authenticated to compromise the environment.

A low-privileged attacker with access to an authenticated account, for example a data scientist using a standard Jupyter notebook, can escalate to a full cluster administrator, according to Red Hat. The affected versions include Red Hat OpenShift AI 2.19, 2.21, and OpenShift AI (RHOAI).

Mitigations include avoiding broad permissions for system-level groups and restricting the ClusterRoleBinding that ties the kueue-batch-user-role to the system:authenticated group, with a recommendation to apply least-privilege access.