The Red Hat Trusted Artifact Signer (RHTAS) Operator, used with OpenShift Container Platform versions 4.15 to 4.19, has two associated vulnerabilities identified as CVE-2025-61729 and CVE-2025-65945. These vulnerabilities are categorized under CWE-1050 and CWE-347, indicating potential issues related to cryptographic weaknesses or improper verification. The advisory does not provide detailed technical descriptions or CVSS scores, nor does it indicate any available patches or fixes. RHTAS is designed to simplify cryptographic signing and verification of container images, binaries, and source code changes as part of software supply chain security.

The vulnerabilities are rated as high severity, suggesting significant potential impact on the integrity or security of software artifacts managed by RHTAS. However, no known exploits in the wild have been reported, and the advisory does not specify the exact impact or exploitation scenarios. The lack of available patches means affected users may remain exposed until remediation is provided.

The vendor advisory does not indicate any available fixes or patches for these vulnerabilities at this time. Patch status is not yet confirmed — users should monitor the official Red Hat advisory (RHSA-2026:2921) and product documentation for updates. Since this is a self-managed on-premise deployment, organizations should consider risk mitigation strategies appropriate to their environment and stay informed through Red Hat security channels.