PT-2026-28270 · Red Hat · Red Hat Openshift Ai (Rhoai) Llama-Stack-Operator

Published 2026-03-26 · Updated 2026-03-27 · CVE-2025-12805

Positive Technologies (AI Summary)

CVSS v2.0

8.5

High

Base vector

AV:N/AC:L/Au:S/C:C/I:C/A:N

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift AI (RHOAI) llama-stack-operator (affected versions not specified)

Description A flaw exists in Red Hat OpenShift AI (RHOAI) llama-stack-operator that allows unauthorized access to Llama Stack services deployed in other namespaces through direct network requests. This occurs because no NetworkPolicy restricts access to the llama-stack service endpoint. Consequently, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.

Weakness Enumeration

CWE-653

Related Identifiers

BDU:2026-07529

CVE-2025-12805

Affected Products

Red Hat Openshift Ai (Rhoai) Llama-Stack-Operator

References · 8

• https://nvd.nist.gov/vuln/detail/CVE-2025-12805 · Security Note
• https://access.redhat.com/errata/RHSA-2026:2695 · Vendor Advisory
• https://bugzilla.redhat.com/show_bug.cgi?id=2413101 · Vendor Advisory
• https://access.redhat.com/errata/RHSA-2026:2106 · Vendor Advisory
• https://access.redhat.com/security/cve/CVE-2025-12805 · Vendor Advisory
• https://bdu.fstec.ru/vul/2026-07529 · Security Note
• https://twitter.com/TheHackerWire/status/2037303818803986760 · Twitter Post
• https://twitter.com/CVEnew/status/2037513420577120397 · Twitter Post