Most recent entries from all https://vulnerability.circl.lu Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Thu, 01 Oct 2026 23:49:47 +0000 CVE-2025-12805 — Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy https://vulnerability.circl.lu/vuln/cve-2025-12805 <p><strong>Affected:</strong> Red Hat OpenShift AI 2.25, Red Hat OpenShift AI (RHOAI)</p> <p>A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.</p> <p><strong>Affected:</strong> Red Hat OpenShift AI 2.25, Red Hat OpenShift AI (RHOAI)</p> <p>A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.</p> https://vulnerability.circl.lu/vuln/cve-2025-12805