CVE-2025-11065: Red Hat Openshift Pipelines

Medium severity, CVSS 5.3. EPSS: 0.4% chance of exploitation in the next 30 days.

A flaw was found in github.com/go-viper/mapstructure/v2, in the field processing component using mapstructure.WeakDecode. This vulnerability allows information disclosure through detailed error messages that may leak sensitive input values via malformed user-supplied data processed in security-critical contexts.

Affected products

• Red Hat Openshift Pipelines
• Red Hat Red Hat Advanced Cluster Management For Kubernetes 2
• Red Hat Red Hat Advanced Cluster Security 4
• Red Hat Red Hat Certification For Red Hat Enterprise Linux 8
• Red Hat Red Hat Certification Program For Red Hat Enterprise Linux 9
• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat Openshift Ai Rhoai
• Red Hat Red Hat Openshift Container Platform 4
• Red Hat Red Hat Openshift Dev Spaces
• Red Hat Red Hat Openshift Distributed Tracing 3
• Red Hat Red Hat Openshift Gitops
• Red Hat Red Hat Trusted Application Pipeline
• Red Hat Red Hat Trusted Artifact Signer
• Red Hat Zero Trust Workload Identity Manager - Tech Preview

Published 2026-01-26. Last modified 2026-06-30.