The Red Hat Insights proxy Container Image, used by the Insights proxy product RPM to route traffic from disconnected or air-gapped systems to Red Hat Insights, is affected by multiple vulnerabilities including CVE-2025-14087 and CVE-2025-14512. These vulnerabilities have a CVSS vector indicating network attack vector, high attack complexity, no privileges required, no user interaction, and impact on confidentiality, integrity, and availability at a low level. The advisory does not provide a patch or fix for these issues but advises applying all previously released errata relevant to the system. The container image is identified by specific SHA256 digests for amd64 and arm64 architectures. No known exploits in the wild have been reported. The vendor advisory is the authoritative source and does not indicate an official fix at this time.

The vulnerabilities potentially allow an attacker to impact confidentiality, integrity, and availability of the Insights proxy Container Image when exploited remotely without privileges or user interaction. The CVSS vector indicates a high severity level with low-level impacts on confidentiality, integrity, and availability. Since the Insights proxy routes all Red Hat Insights traffic for disconnected or air-gapped systems, exploitation could affect the security and privacy of these environments. However, no known exploits are currently reported in the wild.

No official fix or patch is currently available for these vulnerabilities. Red Hat advises ensuring that all previously released errata relevant to the system have been applied before updating the Insights proxy container image. Users should monitor Red Hat advisories for future updates or patches addressing these vulnerabilities. Since this is not a cloud service, remediation depends on applying vendor updates when released.