PT-2025-41806 · Omni · Omni

Smira · Published 2025-10-13 · Updated 2025-12-04 · CVE-2025-61688

Positive Technologies (AI Summary)

CVSS v3.1

8.6

High

Base vector

AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:N/A:N

Name of the Vulnerable Software and Affected Versions Omni versions prior to 1.1.5 Omni versions prior to 1.0.2

Description Omni, a platform for managing Kubernetes, may disclose sensitive information through an API endpoint in affected versions. The platform operates on bare metal, virtual machines, and cloud infrastructures.

Recommendations Update Omni to version 1.1.5 or later. Update Omni to version 1.0.2 or later.

Exploit

Fix

Information Disclosure

Weakness Enumeration

CWE-200

Related Identifiers

CVE-2025-61688

GHSA-77R9-W39M-9XH5

GO-2025-4022

OPENSUSE-SU-2025:15710-1

Affected Products

Omni

References · 86

• 🔥 https://github.com/CVEProject/cvelistV5/tree/main/cves/2025/61xxx/CVE-2025-61688.json · Exploit
• https://github.com/siderolabs/omni/security/advisories/GHSA-77r9-w39m-9xh5 · Vendor Advisory
• https://osv.dev/vulnerability/GHSA-77r9-w39m-9xh5 · Vendor Advisory
• https://osv.dev/vulnerability/openSUSE-SU-2025:15710-1 · Vendor Advisory
• https://osv.dev/vulnerability/CVE-2025-61688 · Vendor Advisory
• https://nvd.nist.gov/vuln/detail/CVE-2025-61688 · Security Note
• https://osv.dev/vulnerability/GO-2025-4022 · Vendor Advisory
• https://github.com/siderolabs/omni · Note
• https://suse.com/security/cve/CVE-2016-11067 · Note
• https://suse.com/security/cve/CVE-2025-58073 · Note
• https://suse.com/security/cve/CVE-2016-11078 · Note
• https://twitter.com/CveFindCom/status/1977844235530326191 · Twitter Post
• https://suse.com/security/cve/CVE-2025-59043 · Note
• https://suse.com/security/cve/CVE-2025-11375 · Note
• https://suse.com/security/cve/CVE-2025-54471 · Note