Red Hat Security Advisory: Logging for Red Hat OpenShift - 5.9.12
Affects Red HatSource GCVE Database
Mentioned vulnerabilities
Not known to be exploited.
Data as of 25 Oct 2026, 19:02 UTC
Rated by Threat Radar · No CVSS score from NVD or the CNA
- EPSS
- 2.5% chance of exploitation in 30 days – higher than 84% of CVEsExploit Prediction Scoring System: the likelihood attackers will use this flaw soon.
Exploitation evidence
Disclosed: evidence found.
CVE published 5 Mar 2025
Detectable: no evidence on record.
No public nuclei template indexed
Weaponised: no evidence on record.
No public exploit code indexed in Metasploit or Exploit-DB
Exploited in the wildExploited: no evidence on record.
Not in CISA KEV and no source reports exploitation
Observed by OffSeq MirageSeen by Mirage: no evidence on record.
No attack traffic recorded by OffSeq Mirage sensors
A missing step is not evidence of safety. Sources: cve.org (opens in a new tab), the Metasploit, Exploit-DB and nuclei-templates index as of 2026-10-25.
What to do
Affected software
| Product | Affected | Fixed in |
|---|---|---|
| Red Hat Product Security Red Hat | Affected
| Fixed in– |
AI-suggested
Red Hat has provided official upgrade instructions to mitigate this vulnerability. Users of Red Hat OpenShift Logging 5.9 should follow the guidance in the Red Hat advisory and upgrade their logging subsystem accordingly. The advisory references documentation for upgrading OpenShift Container Platform 4.14 and OpenShift Logging 5.9. No other mitigation steps are indicated. Patch status is not explicitly stated as fixed in a specific version; users should consult the vendor advisory for the latest remediation guidance.
Description
A moderate severity vulnerability (CVE-2024-12797 / CVE-2025-25184) affects the logging subsystem of Red Hat OpenShift versions 5.9.0 through 5.9.12. The issue involves possible log injection in the Rack::CommonLogger component within the logging-fluentd-container, which could allow manipulation of log entries and impact log integrity. Red Hat has issued an advisory with instructions for upgrading OpenShift Logging 5.9 to mitigate this issue. No known exploits are active in the wild at this time.