Red Hat Security Advisory: RHOAI 3.4.5 - Red Hat OpenShift AI

This advisory announces the release of Red Hat OpenShift AI version 3.4.5, which includes updates addressing a large number of security vulnerabilities, among them CVE-2025-61162 and many others. The advisory references updated container images and points users to Red Hat's documentation for upgrade procedures. However, the advisory does not specify the exact nature of the vulnerabilities fixed, nor does it list affected versions or detailed remediation steps. The vulnerabilities cover a broad range of CWEs, indicating multiple types of security issues addressed in this release.

The advisory classifies the vulnerabilities as critical, implying that they could lead to severe security consequences if exploited. However, specific impacts per vulnerability are not detailed in the provided information. The lack of known exploits in the wild suggests no active exploitation at the time of the advisory. The vulnerabilities potentially affect Red Hat OpenShift AI deployments prior to version 3.4.5.

Red Hat has released version 3.4.5 of OpenShift AI containing updated images that address the vulnerabilities. Users should follow the official Red Hat OpenShift AI upgrade documentation to apply this update and fully remediate the issues. Since this is an official fix, upgrading to version 3.4.5 is the recommended mitigation. No additional temporary workarounds or mitigations are specified.