CVE-2025-10725 is a privilege escalation vulnerability in Red Hat OpenShift AI Service affecting versions >=2.22.0 and <2.22.2. A low-privileged authenticated user can escalate privileges to cluster administrator, enabling full control over the cluster and underlying infrastructure. This vulnerability is due to overly permissive ClusterRole bindings related to the Kueue component. Red Hat classifies this as an Important severity issue because it requires minimal authentication but not remote unauthenticated access. The vulnerability is associated with CWE-266 (Incorrect Privilege Assignment) and CWE-276. Red Hat released version 2.22.2 to address this issue and provides alternative mitigations to disable or restrict the Kueue component until the update is applied.

Successful exploitation allows an authenticated low-privileged user to gain full cluster administrator privileges. This results in complete compromise of the cluster's confidentiality, integrity, and availability. The attacker can steal sensitive data, disrupt all services, and control the underlying infrastructure, leading to a total breach of the platform and all hosted applications.

A fixed version, Red Hat OpenShift AI 2.22.2, is available and upgrading to this version is the recommended remediation. If immediate upgrade is not possible, mitigations include disabling the Kueue component by setting its management state to "Removed" in the DataScienceCluster resource for versions 2.16.x, or applying specific patches to prevent the operator from managing the kueue-batch-user-rolebinding and disabling the ClusterRoleBinding for versions 2.19 and later. Once the fix is applied, it is recommended to remove the temporary mitigations. Follow Red Hat's official documentation and advisories for detailed upgrade and mitigation instructions.