Red Hat Openshift Ai 2.16 vulnerabilities

5 CVEs affecting Red Hat Openshift Ai 2.16, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-69873, published 2026-02-11.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2024-10963, published 2024-11-07. High severity, CVSS 7.4. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a…
CVE-2025-6193, published 2025-06-20. Medium severity, CVSS 5.9. EPSS: 0.7% chance of exploitation in the next 30 days. A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the…
CVE-2025-10725, published 2025-09-30. Critical severity, CVSS 9.9. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate…
CVE-2025-69873, published 2026-02-11. Low severity, CVSS 2.9. EPSS: 0.5% chance of exploitation in the next 30 days. ajv (Another JSON Schema Validator) before 8.18.0 is vulnerable to Regular Expression Denial of Service (ReDoS) when the $data option is enabled. The pattern keyword accepts runtime data via JSON…
CVE-2025-57852, published 2025-09-30. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In…