Vulnerability · Published Mar 26, 2026 · Assigned by redhat

CVE-2025-12805Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy

High 8.1

In plain English

A high-severity security flaw in Red Hat OpenShift AI 2.25 from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.4% (higher than 33% of all known vulnerabilities).

Severity (CVSS 3.1)8.1High

Exploit odds (30 days)0.4%top 66.7% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat OpenShift AI 2.25	see references
Red Hat	Red Hat OpenShift AI 2.25	see references
Red Hat	Red Hat OpenShift AI (RHOAI)	see references
Red Hat	Red Hat OpenShift AI (RHOAI)	see references

Weakness: CWE-653 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N

References

RHSA-2026:2106 vendor-advisory, x_refsource_REDHAT
RHSA-2026:2695 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2025-12805 vdb-entry, x_refsource_REDHAT
RHBZ#2413101 issue-tracking, x_refsource_REDHAT