https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-18T00:30:38.046452+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-12548 CVE-2025-12548 — Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333 2026-10-18T00:30:38.065658+00:00

Affected: Red Hat OpenShift Dev Spaces (RHOSDS) 3.22, Red Hat OpenShift Dev Spaces (RHOSDS) 3.23, Red Hat OpenShift Dev Spaces (RHOSDS) 3.24

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.