https://cve.radiocsirt.org/rss/recent/all/10 Most recent entries from all 2026-10-05T12:10:54.887931+00:00 Vulnerability-Lookup csirt@opendfir.org python-feedgen Contains only the most 10 recent entries. https://cve.radiocsirt.org/vuln/cve-2025-12103 CVE-2025-12103 — Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace 2026-10-05T12:10:54.904574+00:00

Affected: Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.0, Red Hat OpenShift AI (RHOAI)

A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster.

TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster

Additionally users can access all `persistentvolumeclaims` and `lmevaljobs`