{"id":"CVE-2025-12103","revision":"28daa7434cb34f6b8112dfd5ec6fb297","records":[{"revision":"28daa7434cb34f6b8112dfd5ec6fb297","observedAt":"2026-10-23T15:48:27.903+00:00","statement":{"source":"cve-program","id":"CVE-2025-12103","aliases":[],"title":"Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace","description":"A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to  get, list, watch any pod in any namespace on the cluster.\n\nTrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster \n\nAdditionally users can access all `persistentvolumeclaims` and `lmevaljobs`","state":0,"publishedAt":"2025-10-28T13:31:59.318+00:00","modifiedAt":"2026-10-09T17:44:05.471+00:00","affected":[{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhoai/odh-ta-lmes-driver-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift AI 2.25\",\n                    \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n                    \"packageName\": \"rhoai/odh-ta-lmes-driver-rhel9\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"1776243252\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift_ai:2.25::el9\"\n                    ]\n                }"},{"ecosystem":"https://catalog.redhat.com/software/containers/","name":"rhoai/odh-trustyai-service-operator-rhel9","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift AI 3.0\",\n                    \"collectionURL\": \"https://catalog.redhat.com/software/containers/\",\n                    \"packageName\": \"rhoai/odh-trustyai-service-operator-rhel9\",\n                    \"defaultStatus\": \"affected\",\n                    \"versions\": [\n                        {\n                            \"version\": \"v3.0.0-1762251316\",\n                            \"lessThan\": \"*\",\n                            \"versionType\": \"rpm\",\n                            \"status\": \"unaffected\"\n                        }\n                    ],\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift_ai:3.0::el9\"\n                    ]\n                }"},{"ecosystem":"https://access.redhat.com/downloads/content/package-browser/","name":"rhoai/odh-trustyai-service-operator-rhel8","ranges":[],"versions":[],"rawVersionEvidence":"{\n                    \"vendor\": \"Red Hat\",\n                    \"product\": \"Red Hat OpenShift AI (RHOAI)\",\n                    \"collectionURL\": \"https://access.redhat.com/downloads/content/package-browser/\",\n                    \"packageName\": \"rhoai/odh-trustyai-service-operator-rhel8\",\n                    \"defaultStatus\": \"affected\",\n                    \"cpes\": [\n                        \"cpe:/a:redhat:openshift_ai\"\n                    ]\n                }"}],"metrics":[{"system":"CVSS 3.1","vector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:L/I:N/A:N","score":5,"severity":"MEDIUM"}],"references":["https://access.redhat.com/errata/RHSA-2025:21117","https://access.redhat.com/errata/RHSA-2026:10184","https://access.redhat.com/security/cve/CVE-2025-12103","https://bugzilla.redhat.com/show_bug.cgi?id=2405966"],"sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2025-12103","license":"CVE Program Terms of Use","key":"cve-program:CVE-2025-12103","identifiers":["CVE-2025-12103"]},"retained":false,"historicalAffected":[]}],"coverage":[]}