Red Hat Security Advisory: Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2
Kiali 2.17.2, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently. Security Fix(es): * kiali-ossmc-rhel9: node-forge ASN.1 Unbounded Recursion (CVE-2025-66031) * kiali-rhel9: node-forge ASN.1 Unbounded Recursion (CVE-2025-66031) * kiali-ossmc-rhel9: glob CLI: Command injection via -c/--cmd executes matches with shell:true (CVE-2025-64756) * kiali-rhel9: glob CLI: Command injection via -c/--cmd executes matches with shell:true (CVE-2025-64756)
AI Analysis
Technical Summary
This advisory covers security fixes in Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2. It addresses CVE-2025-66031, an unbounded recursion vulnerability in the node-forge ASN.1 parser, which could lead to resource exhaustion or denial of service. It also fixes CVE-2025-64756, a command injection vulnerability in the glob CLI when using the -c/--cmd option with shell:true, allowing potential arbitrary command execution. These vulnerabilities affect the kiali-ossmc-rhel9 and kiali-rhel9 components. The advisory references Red Hat's errata RHSA-2025:22941 and provides updated container images. The vulnerabilities are rated with high severity but no CVSS score is provided.
Potential Impact
The vulnerabilities could allow an attacker to cause unbounded recursion leading to denial of service (CVE-2025-66031) or execute arbitrary commands via command injection (CVE-2025-64756) in affected Kiali components. This impacts the observability and management capabilities of the Red Hat OpenShift Service Mesh 3.2 environment, potentially disrupting service mesh monitoring and control.
Mitigation Recommendations
Red Hat has released Kiali 2.17.2 which includes fixes for these vulnerabilities. Users should upgrade to Kiali 2.17.2 as documented in the official Red Hat OpenShift Service Mesh 3.2 documentation. Updated container images are available from Red Hat registries. There are no indications that the vulnerabilities are already mitigated or require no action. Patch status is confirmed by the vendor advisory referencing the fixed version 2.17.2.
Red Hat Security Advisory: Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2
Description
Kiali 2.17.2, for Red Hat OpenShift Service Mesh 3.2, provides observability for the service mesh by offering a visual representation of the mesh topology and metrics, helping users monitor, trace, and manage efficiently. Security Fix(es): * kiali-ossmc-rhel9: node-forge ASN.1 Unbounded Recursion (CVE-2025-66031) * kiali-rhel9: node-forge ASN.1 Unbounded Recursion (CVE-2025-66031) * kiali-ossmc-rhel9: glob CLI: Command injection via -c/--cmd executes matches with shell:true (CVE-2025-64756) * kiali-rhel9: glob CLI: Command injection via -c/--cmd executes matches with shell:true (CVE-2025-64756)
Affected software
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This advisory covers security fixes in Kiali 2.17.2 for Red Hat OpenShift Service Mesh 3.2. It addresses CVE-2025-66031, an unbounded recursion vulnerability in the node-forge ASN.1 parser, which could lead to resource exhaustion or denial of service. It also fixes CVE-2025-64756, a command injection vulnerability in the glob CLI when using the -c/--cmd option with shell:true, allowing potential arbitrary command execution. These vulnerabilities affect the kiali-ossmc-rhel9 and kiali-rhel9 components. The advisory references Red Hat's errata RHSA-2025:22941 and provides updated container images. The vulnerabilities are rated with high severity but no CVSS score is provided.
Potential Impact
The vulnerabilities could allow an attacker to cause unbounded recursion leading to denial of service (CVE-2025-66031) or execute arbitrary commands via command injection (CVE-2025-64756) in affected Kiali components. This impacts the observability and management capabilities of the Red Hat OpenShift Service Mesh 3.2 environment, potentially disrupting service mesh monitoring and control.
Mitigation Recommendations
Red Hat has released Kiali 2.17.2 which includes fixes for these vulnerabilities. Users should upgrade to Kiali 2.17.2 as documented in the official Red Hat OpenShift Service Mesh 3.2 documentation. Updated container images are available from Red Hat registries. There are no indications that the vulnerabilities are already mitigated or require no action. Patch status is confirmed by the vendor advisory referencing the fixed version 2.17.2.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:22941
- Cve Count
- 3
- Additional Cves
- ["CVE-2025-64756","CVE-2025-66031"]
- Cvss Version
- null
Threat ID: 6a160974e29bf47b5063ebb4
Added to database: 05/26/2026, 20:58:28 UTC
Last enriched: 07/30/2026, 13:31:55 UTC
Last updated: 07/31/2026, 19:30:11 UTC
Views: 67
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
External Links
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.