CVE-2025-10725 is a privilege escalation vulnerability in Red Hat OpenShift AI Service affecting versions >=2.19.0 and <2.19.3. It allows a low-privileged authenticated user to escalate privileges to full cluster administrator, compromising the entire cluster. The vulnerability is related to overly permissive ClusterRole bindings associated with the Kueue component. Red Hat has released version 2.19.3 with fixes and provides alternative mitigations such as disabling the Kueue component or modifying ClusterRoleBindings to prevent privilege escalation. The vulnerability is tracked under CWE-266 (Incorrect Privilege Assignment) and CWE-276. No CVSS score is provided by Red Hat, but the impact is rated high due to full cluster compromise potential.

An attacker with minimal authenticated access can escalate privileges to full cluster administrator, enabling them to compromise confidentiality, integrity, and availability of the entire OpenShift AI cluster. This includes stealing sensitive data, disrupting services, and controlling underlying infrastructure, leading to a total platform breach.

Red Hat has released OpenShift AI version 2.19.3 which addresses this vulnerability. Users should upgrade to this version to fully remediate the issue. If immediate upgrade is not possible, mitigations include disabling the Kueue component by setting its management state to "Removed" in the DataScienceCluster resource or applying patches to prevent the operator from managing the vulnerable ClusterRoleBinding and disabling it by assigning it to a non-existent group. After applying fixes, the temporary mitigations should be removed. Follow Red Hat's official documentation and errata for detailed upgrade and mitigation instructions.