Red Hat has issued a security advisory (RHSA-2026:7378) for Red Hat Hardened Images RPMs that includes fixes for multiple vulnerabilities such as CVE-2025-55130 and related CVEs. The CVSS vector for CVE-2025-55130 indicates local attack vector with low complexity, requiring low privileges and no user interaction, impacting confidentiality and integrity with no availability impact. The advisory references an update available for Red Hat Hardened Images but does not provide explicit patch version details. The vulnerabilities are categorized under several CWEs including authentication issues (CWE-281), improper authentication (CWE-289), and others. No known exploits have been reported in the wild. The vendor advisory directs users to https://images.redhat.com/ for update application instructions.

The vulnerabilities addressed have high severity, impacting confidentiality and integrity of affected systems running Red Hat Hardened Images RPMs. Exploitation requires local access with low privileges and no user interaction, potentially allowing unauthorized access or modification of sensitive data. There are no known exploits in the wild at this time. The impact does not include availability degradation.

Red Hat has released an update for Red Hat Hardened Images RPMs that includes fixes for these vulnerabilities. Users should apply the update as instructed by Red Hat at https://images.redhat.com/. Since this is not a cloud service, remediation depends on user action to update affected packages. Patch status is not explicitly confirmed in the advisory text, so users should verify the latest update availability and instructions from Red Hat official resources. No additional mitigation steps are specified by the vendor.