This advisory covers security fixes in the Red Hat build of Cryostat 4.0.2 container images on RHEL 9. The update addresses three vulnerabilities: CVE-2025-8415, an authentication bypass issue in Cryostat when Network Policies are disabled; CVE-2025-55163, a Netty HTTP/2 DDoS vulnerability known as MadeYouReset; and CVE-2025-7783, an unsafe random function in the form-data library. The updated images include backported patches and enhancements. Users should upgrade to these images from the Red Hat Container Registry and rebuild any container images that depend on them. The advisory does not provide CVSS scores but rates the impact as important.

The vulnerabilities fixed include an authentication bypass which could allow unauthorized access if network policies are disabled, a denial-of-service vulnerability in the Netty HTTP/2 codec that could be exploited to disrupt service, and a weakness in the randomness of form-data processing that could affect security. These issues collectively pose a high security risk to affected Cryostat 4 on RHEL 9 container deployments if left unpatched.

Red Hat has released updated Cryostat 4.0.2 container images on RHEL 9 that include backported patches for these vulnerabilities. Users should upgrade to these updated images available from the Red Hat Container Registry and rebuild all container images that depend on them. This is the official and recommended remediation. Patch status is confirmed as fixed by Red Hat Product Security in advisory RHSA-2025:14919.