Red Hat Openshift Ai 2.21 vulnerabilities

2 CVEs affecting Red Hat Openshift Ai 2.21, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-10725, published 2025-09-30.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-10725, published 2025-09-30. Critical severity, CVSS 9.9. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in Red Hat Openshift AI Service. A low-privileged attacker with access to an authenticated account, for example as a data scientist using a standard Jupyter notebook, can escalate…
• CVE-2025-57852, published 2025-09-30. Medium severity, CVSS 6.4. EPSS: 0.2% chance of exploitation in the next 30 days. A container privilege escalation flaw was found in KServe ModelMesh container images. This issue stems from the /etc/passwd file being created with group-writable permissions during build time. In…