Vulnerability · Published Jun 9, 2025 · Assigned by redhat

CVE-2025-25207Rhcl: authpolicy callbacks result in denial of service in authorino severity

Medium 5.7

In plain English

A medium-severity resource allocation without limits in rhcl-operator-container. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 21% of all known vulnerabilities).

Severity (CVSS 3.1)5.7Medium

Exploit odds (30 days)0.3%top 79.1% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

The Authorino service in the Red Hat Connectivity Link is the authorization service for zero trust API security. Authorino allows the users with developer persona to add callbacks to be executed to HTTP endpoints once the authorization process is completed. It was found that an attacker with developer persona access can add a large number of those callbacks to be executed by Authorino and as the authentication policy is enforced by a single instance of the service, this leada to a Denial of Service in Authorino while processing the post-authorization callbacks.

Affected packages & fixed versions

Ecosystem	Package	Fixed in	Advisory
Go	github.com/kuadrant/authorino	no fix listed	GHSA-r8xr-pgv5-gxw3
Go	github.com/kuadrant/authorino	no fix listed	GO-2025-3746

Affected products (as reported)

Vendor	Product	Versions
	rhcl-operator-container	1.0.1
Red Hat	Red Hat Connectivity Link 1	see references

Weakness: CWE-770 · Vector: CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:N/I:N/A:H

References

https://access.redhat.com/security/cve/CVE-2025-25207 vdb-entry, x_refsource_REDHAT
RHBZ#2347421 issue-tracking, x_refsource_REDHAT