PT-2025-13692 · Red Hat · Openshift Lightspeed Service

CVE-2025-2586 · Published 2025-03-31 · Updated 2026-06-25

Positive Technologies (AI Summary)

CVSS v3.1

7.5

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

Name of the Vulnerable Software and Affected Versions OpenShift Lightspeed Service (affected versions not specified)

Description The OpenShift Lightspeed Service is susceptible to unauthenticated API request flooding. An external attacker can send repeated queries to non-existent endpoints, which inflates metrics storage and processing. This resource exhaustion affects CPU, RAM, and disk space, potentially leading to monitoring system degradation and service unavailability, impacting the stability of both the application and the cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

DoS

Resource Exhaustion

Weakness Enumeration

CWE-400

Related Identifiers

CVE-2025-2586

Affected Products

Openshift Lightspeed Service

References · 16

• https://nvd.nist.gov/vuln/detail/CVE-2025-2586 · Security Note
• https://github.com/openshift/lightspeed-service/pull/2369 · Note
• https://access.redhat.com/security/cve/CVE-2025-2586 · Note
• https://twitter.com/CVEnew/status/1906675433266987394 · Twitter Post
• https://t.me/cveNotify/176368 · Telegram Post
• https://twitter.com/cybercronai/status/1906708730336399661 · Twitter Post
• https://t.me/cvedetector/21581 · Telegram Post
• https://twitter.com/vulns_space/status/1906685430050824685 · Twitter Post
• https://twitter.com/AyushInfo57268/status/1906688822139842617 · Twitter Post
• https://twitter.com/Gabriel_coder01/status/1906816022507610601 · Twitter Post
• https://twitter.com/Carlos_LopezMkt/status/1907751359601873091 · Twitter Post
• https://twitter.com/GABBYTECH_SEC/status/1906820996184821906 · Twitter Post
• https://bugzilla.redhat.com/show_bug.cgi?id=2353998 · Note
• https://twitter.com/cracbot/status/1908112427549409439 · Twitter Post
• https://twitter.com/cracbot/status/1907750035259011208 · Twitter Post