CVE-2025-8556: Red Hat Builds For Red Hat Openshift

Low severity, CVSS 3.7. EPSS: 0.5% chance of exploitation in the next 30 days.

A flaw was found in CIRCL's implementation of the FourQ elliptic curve. This vulnerability allows an attacker to compromise session security via low-order point injection and incorrect point validation during Diffie-Hellman key exchange.

Affected products

• Red Hat Builds For Red Hat Openshift
• Red Hat Custom Metric Autoscaler Operator For Red Hat Openshift
• Red Hat Multicluster Global Hub
• Red Hat Openshift Pipelines
• Red Hat Openshift Serverless
• Red Hat Openshift Service Mesh 3
• Red Hat Red Hat Advanced Cluster Management For Kubernetes 2
• Red Hat Red Hat Advanced Cluster Security 4
• Red Hat Red Hat Ceph Storage 5
• Red Hat Red Hat Ceph Storage 6
• Red Hat Red Hat Ceph Storage 8
• Red Hat Red Hat Developer Hub
• Red Hat Red Hat Edge Manager Preview
• Red Hat Red Hat Enterprise Linux 10
• Red Hat Red Hat Enterprise Linux 9
• Red Hat Red Hat Enterprise Linux Ai Rhel Ai
• Red Hat Red Hat Openshift Ai Rhoai
• Red Hat Red Hat Openshift Container Platform 4
• Red Hat Red Hat Openshift Dev Workspaces Operator
• Red Hat Red Hat Openshift For Windows Containers
• Red Hat Red Hat Openshift Gitops
• Red Hat Red Hat Openshift Virtualization 4
• Red Hat Red Hat Openstack Platform 16.2
• Red Hat Red Hat Openstack Platform 17.1
• Red Hat Red Hat Trusted Application Pipeline
• and 2 more

Published 2025-08-06. Last modified 2026-06-17.