Log in Start free

Vulnerability · Published Jan 13, 2026 · Assigned by redhat

CVE-2025-12548Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333

Critical 9.0

In plain English

A critical-severity missing authentication in Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 1.3% (higher than 71% of all known vulnerabilities). Ready-made attack tooling exists: Metasploit.

Severity (CVSS 3.1)9.0Critical
Exploit odds (30 days)1.3%top 29.5% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack tooling1Metasploit

Official description

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 see references
Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.23 see references
Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 see references

Weakness: CWE-306 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

References