CVE-2025-12985: IBM Licensing Operator

High severity, CVSS 8.4. EPSS: 0.1% chance of exploitation in the next 30 days.

IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Licensing Operator image.

Affected products

• IBM IBM Licensing Operator: version 9.0.0 only; version 9.0.1 only; version 9.1.0 only; version 9.2.0 only

Published 2026-01-20. Last modified 2026-06-17.