This advisory concerns vulnerabilities in the Red Hat Insights proxy Container Image, which acts as a proxy for Insights traffic in disconnected or air-gapped environments. The container image is used by the Insights proxy product RPM. The vulnerabilities are tracked under CVE-2025-5914, CVE-2025-32414, and CVE-2025-32415, associated with CWEs including integer overflow (CWE-190), improper check for dropped privileges (CWE-393), and out-of-bounds read (CWE-125). The advisory (RHSA-2025:14644) does not list any fixes or patches currently available and recommends ensuring all previously released errata are applied before updating. The container image is not a cloud service, so remediation depends on applying updates locally.

The vulnerabilities affect the Insights proxy container image used to route Red Hat Insights traffic in isolated environments. The advisory classifies the severity as high but does not specify exploitation details or confirmed impacts. No known exploits in the wild have been reported. The vulnerabilities could potentially impact the confidentiality, integrity, or availability of the Insights proxy service in disconnected or air-gapped customer systems.

The Red Hat advisory does not currently provide fixes or patches for these vulnerabilities. It recommends ensuring that all previously released errata relevant to the system are applied before updating the Insights proxy container image. Since no official fix is listed, users should monitor Red Hat advisories for updates. No additional vendor-recommended mitigations are provided at this time.