This security advisory from Red Hat Product Security concerns vulnerabilities in Red Hat OpenShift sandboxed containers, which are based on the Kata Containers project. The vulnerabilities include CVE-2025-5914, CVE-2025-6020, and CVE-2025-8941, associated with CWE-190 (integer overflow) and CWE-22 (path traversal). The advisory announces a new release of the sandboxed containers but explicitly states that no fixes are included for these CVEs. The affected versions include Red Hat OpenShift sandboxed containers 1.1 and related container images. There is no CVSS score provided, and no known exploits have been reported. The vendor advisory does not confirm patch availability or remediation status.

The vulnerabilities have been rated as high severity, indicating a significant security risk if exploited. The CWE categories suggest potential for integer overflow and path traversal attacks, which could lead to unauthorized access or denial of service. However, no known exploits are currently reported in the wild. The lack of an official fix or patch in the advisory means the vulnerabilities remain unmitigated in the affected versions at this time.

The vendor advisory does not provide any fixes or patches for these vulnerabilities in the current release. Patch status is not yet confirmed — check the vendor advisory for current remediation guidance. Users should monitor Red Hat's official security updates for any forthcoming patches or mitigations. No vendor-stated mitigations or workarounds are currently available.