RED HAT OPENSHIFT AI FLAW EXPOSES HYBRID CLOUD INFRASTRUCTURE TO FULL TAKEOVER

Summary from the TLDR InfoSec newsletter

A critical vulnerability (CVE-2025-10725) has been identified in Red Hat OpenShift AI that allows authenticated attackers to escalate privileges and potentially compromise entire cloud environments. Versions 2.19, 2.21, and RHOAI are affected. Red Hat recommends limiting permissions, especially for system groups, and suggests granting job creation rights only to specific users or groups to minimize risk.