The Red Hat Insights proxy container image contains a path traversal vulnerability (CVE-2025-53905) that allows an attacker to write files outside the intended directory scope. This could enable overwriting sensitive files or placing executable code in privileged locations, contingent on the permissions of the process editing the archive. The vulnerability is classified under CWE-22 (Improper Limitation of a Pathname to a Restricted Directory). Red Hat has not provided an official patch or fix for this issue, citing lack of suitable mitigation options that meet their criteria for ease of use, applicability, and stability. The vulnerability affects the Red Hat Insights proxy container image used in disconnected or air-gapped environments to route Insights traffic securely.

Successful exploitation can lead to unauthorized modification or creation of critical files, including programs or libraries, potentially allowing code execution or bypassing security mechanisms. It may also expose sensitive data or cause denial of service by corrupting essential files. The impact depends on the permissions of the process running the Insights proxy container. Red Hat rates this vulnerability as medium severity. There are no known exploits in the wild at this time.

Red Hat has not released a patch or official fix for this vulnerability. Mitigation options currently available do not meet Red Hat's criteria for deployment due to complexity or limited applicability. Users are advised to ensure all previously released errata relevant to their systems are applied. Monitoring Red Hat advisories for future updates or fixes is recommended. No specific workaround is provided by Red Hat at this time.