CVE-2025-10725 is a privilege escalation vulnerability in Red Hat OpenShift AI Service affecting versions >=2.21.0 <2.21.1. It allows a low-privileged authenticated user to escalate privileges to cluster administrator, enabling full control over the cluster and hosted applications. The vulnerability is related to overly permissive ClusterRole bindings in the Kueue component. Red Hat released version 2.21.1 to address this issue and provides alternative mitigations such as disabling the Kueue component or modifying ClusterRoleBindings to prevent privilege escalation. The vulnerability is tracked under CWE-266 (Incorrect Privilege Assignment) and CWE-276, and has been assigned a high severity rating by Red Hat.

Successful exploitation allows an authenticated low-privileged user to gain full cluster administrator privileges, leading to total compromise of the cluster's confidentiality, integrity, and availability. This includes the ability to steal sensitive data, disrupt services, and control underlying infrastructure and all hosted applications.

A fix is available in Red Hat OpenShift AI version 2.21.1. Users should upgrade to this version to fully remediate the vulnerability. For versions 2.16.x, upgrading to 2.16.3 is recommended. If upgrading is not immediately possible, mitigations include disabling the Kueue component by setting its management state to "Removed" in the RHOAI DataScienceCluster resource or applying patches to prevent the RHOAI operator from managing the kueue-batch-user-rolebinding and disabling this ClusterRoleBinding by assigning it to a non-existent group. Once a fixed version is deployed, it is recommended to remove the temporary ClusterRoleBinding changes. Refer to Red Hat advisory RHSA-2025:16983 and official documentation for detailed instructions.