CVE-2025-68121 is a vulnerability in the crypto/tls component affecting Red Hat OpenShift Builds versions 1.7.0 and 1.7.1. The flaw occurs during TLS session resumption when certificate authority settings are changed between the initial and resumed handshakes, allowing an attacker to bypass certificate validation. This could enable a client or server to establish a connection that should have been rejected, resulting in authentication bypass. The vulnerability requires specific conditions and is not straightforward to exploit. Red Hat has issued an advisory recommending upgrading to version 1.7.2 to mitigate the issue. The CVSS score assigned by Red Hat is 7.4 (high severity) with high confidentiality and integrity impact but no availability impact.

The vulnerability allows bypassing certificate validation during TLS session resumption under specific runtime conditions, potentially leading to authentication bypass. This impacts the confidentiality and integrity of TLS connections but does not affect system availability. Exploitation requires a controlled environment and is not trivial.

Red Hat recommends upgrading affected Red Hat OpenShift Builds versions 1.7.0 and 1.7.1 to version 1.7.2, which addresses this vulnerability. No other mitigations or temporary fixes are indicated in the advisory.