Skip to main content
Press slash or control plus K to focus the search. Use the arrow keys to navigate results and press enter to open a threat.
Reconnecting to live updates…
EPSS 0.7%top 51%

Red Hat Security Advisory: RHOAI 2.16.3 - Red Hat OpenShift AI

0
High
Published: 09/29/2025 (09/29/2025, 17:16:06 UTC)
Source: GCVE Database
Vendor/Project: Red Hat Product Security
Product: Red Hat

Description

Release of RHOAI 2.16.3 provides these changes:

Affected software

Affected versions
Red HatRed Hat OpenShift AIRed Hat OpenShift AI 2.16amd64registry.redhat.io/rhoai/odh-dashboard-rhel8@sha256:2eedd1e2465d2e78fafb39e234dbb413a82713f187c64d70a80340ec94807d30_amd64

AI-Powered Analysis

Machine-generated threat intelligence

AILast updated: 06/27/2026, 22:13:32 UTC

Technical Analysis

The Red Hat security advisory RHSA-2025:16981 announces the release of Red Hat OpenShift AI 2.16.3, which addresses two vulnerabilities identified as CVE-2025-10725 and CVE-2025-57852. These vulnerabilities are associated with improper access control and authorization issues (CWE-266 and CWE-276). The advisory does not provide detailed technical descriptions or CVSS scores but classifies the severity as high. No exploits are known in the wild. The update includes new container images and instructions for upgrading the cluster to apply the fix. No explicit patch details or affected versions are listed, but the update to 2.16.3 is the remediation path.

Potential Impact

The vulnerabilities involve improper access control and authorization, which could potentially allow unauthorized actions or privilege escalation within Red Hat OpenShift AI environments. The exact impact is not detailed, but the classification as high severity indicates significant risk if exploited. No known active exploitation has been reported.

Mitigation Recommendations

Red Hat has released version 2.16.3 of OpenShift AI to address these vulnerabilities. Users should upgrade their clusters to this version following the official Red Hat documentation and errata instructions. No additional mitigations or workarounds are specified. Patch status is confirmed by the vendor advisory indicating the update as the solution.

Pro Console: star threats, build custom feeds, automate alerts via Slack, email & webhooks.Upgrade to Pro

Technical Details

Gcve Source
db.gcve.eu
Csaf Category
csaf_security_advisory
Csaf Version
2.0
Publisher
Red Hat Product Security
Advisory Id
RHSA-2025:16981
Cve Count
2
Additional Cves
["CVE-2025-57852"]
Cvss Version
null

Threat ID: 6a4049d227e9c7971982bf2c

Added to database: 06/27/2026, 22:08:18 UTC

Last enriched: 06/27/2026, 22:13:32 UTC

Last updated: 07/21/2026, 20:58:53 UTC

Views: 10

Community Reviews

0 reviews

Crowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.

Sort by
Loading community insights…

Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.

Need more coverage?

Upgrade to Pro Console for AI refresh and higher limits.

For incident response and remediation, OffSeq services can help resolve threats faster.

Latest Threats

Breach by OffSeqOFFSEQFRIENDS — 25% OFF

Check if your credentials are on the dark web

Instant breach scanning across billions of leaked records. Free tier available.

Scan now
OffSeq TrainingCredly Certified

Lead Pen Test Professional

Technical5-day eLearningPECB Accredited
View courses