The Red Hat Insights proxy Container Image, used by the Insights proxy product RPM, facilitates secure routing of Red Hat Insights traffic for disconnected or air-gapped systems. CVE-2025-6020 is one of six vulnerabilities identified in this container image, involving multiple CWEs such as path traversal (CWE-22), null pointer dereference (CWE-476), double free (CWE-415), improper certificate validation (CWE-295), and buffer overflow (CWE-122). The advisory (RHSA-2025:17181) from Red Hat Product Security acknowledges these vulnerabilities but does not provide a patch or fix at this time. The container image is not a cloud service, and no exploits have been observed in the wild.

The vulnerabilities affect the Insights proxy container image that intermediates Red Hat Insights traffic for disconnected or air-gapped customer systems. Given the role of this component in routing and securing traffic, exploitation could potentially compromise the confidentiality, integrity, or availability of Insights data in these environments. However, no known exploits are reported in the wild, and the advisory does not detail specific impact scenarios beyond the general high severity classification.

The Red Hat advisory does not currently provide a fix or patch for these vulnerabilities. Users are advised to ensure all previously released errata relevant to their systems have been applied before updating the Insights proxy container image when a fix becomes available. Monitor Red Hat's official security advisories for updates regarding patches or mitigations. No additional vendor-recommended mitigations are provided at this time.