Home

Description

A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.

PUBLISHED Reserved 2025-11-06 | Published 2026-03-26 | Updated 2026-03-31 | Assigner redhat




HIGH: 8.1CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

Problem types

Improper Isolation or Compartmentalization

Product status

Default status
affected

sha256:c0d95dfbae20e87113ffb81026d379bb63ad300447df98b27d1bf9a83b084744 (rpm) before *
unaffected

Default status
affected

sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92 (rpm) before *
unaffected

Default status
unaffected

Default status
unaffected

Timeline

2025-11-06:Reported to Red Hat.
2025-12-31:Made public.

References

access.redhat.com/errata/RHSA-2026:2106 (RHSA-2026:2106) vendor-advisory

access.redhat.com/errata/RHSA-2026:2695 (RHSA-2026:2695) vendor-advisory

access.redhat.com/security/cve/CVE-2025-12805 vdb-entry

bugzilla.redhat.com/show_bug.cgi?id=2413101 (RHBZ#2413101) issue-tracking

cve.org (CVE-2025-12805)

nvd.nist.gov (CVE-2025-12805)

Download JSON