Red Hat Openshift Dev Spaces Rhosds 3.24 vulnerabilities

2 CVEs affecting Red Hat Openshift Dev Spaces Rhosds 3.24, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2025-12548, published 2026-01-13.

More from Red Hat.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

• CVE-2025-12548, published 2026-01-13. Critical severity, CVSS 9.0. EPSS: 1.3% chance of exploitation in the next 30 days. A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users'…
• CVE-2025-9566, published 2025-09-05. High severity, CVSS 8.1. EPSS: 1.2% chance of exploitation in the next 30 days. There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a…