Red Hat Security Advisory: OpenShift Container Platform 4.17.16 security update
Description
Red Hat OpenShift Container Platform 4.17.16 includes a security update addressing a path traversal vulnerability in the CRI-O component's log handling functions (CVE-2025-0750) that allows arbitrary unmounting. This vulnerability has been rated with moderate security impact by Red Hat Product Security. Users of OpenShift Container Platform 4.17 are advised to upgrade to the updated packages and container images provided in this release to mitigate the issue.
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The advisory addresses CVE-2025-0750, a path traversal vulnerability in the CRI-O component of Red Hat OpenShift Container Platform 4.17. This flaw in log handling functions allows an attacker to perform arbitrary unmounting operations. The update is delivered as RPM packages and container images for OpenShift Container Platform 4.17.16. Red Hat rates the security impact as moderate and recommends upgrading to the fixed versions. Detailed upgrade instructions are available in the official Red Hat OpenShift documentation.
Potential Impact
The vulnerability allows arbitrary unmounting via path traversal in CRI-O log handling, which could disrupt container runtime operations. Red Hat classifies the impact as moderate, indicating a significant but not critical risk to affected systems. There are no known exploits in the wild at this time.
Mitigation Recommendations
Red Hat has released updated RPM packages and container images as part of OpenShift Container Platform 4.17.16 to fix this vulnerability. Users should upgrade their OpenShift 4.17 clusters using the OpenShift CLI or web console following the official upgrade instructions. The vendor manages remediation through these updates; applying them fully mitigates the issue.
Technical Details
- Gcve Source
- db.gcve.eu
- Csaf Category
- csaf_security_advisory
- Csaf Version
- 2.0
- Publisher
- Red Hat Product Security
- Advisory Id
- RHSA-2025:1122
- Cve Count
- 1
- State
- PUBLISHED
Threat ID: 6ad91cb34d27ba8daafa952c
Added to database: 10/21/2026, 20:12:35 UTC
Last enriched: 10/21/2026, 20:17:19 UTC
Last updated: 10/22/2026, 01:15:17 UTC
Views: 7
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.