CVE-2025-10725 Openshift-ai: overly permissive clusterrole allows authenticated users to escalate privileges to cluster admin

[
  {
    "vendor": "opendatahub-io",
    "product": "opendatahub-operator",
    "versions": [
      {
        "status": "affected",
        "version": "0",
        "lessThan": "3.0.0",
        "versionType": "semver"
      }
    ],
    "packageName": "opendatahub-operator",
    "collectionURL": "https://github.com/opendatahub-io/opendatahub-operator",
    "defaultStatus": "unaffected"
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 2.16",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhoai/odh-rhel8-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "sha256:cebc8815e03b772343b15d0a7dce8fad6fcc71dd437d871db5a3691472350803",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_ai:2.16::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 2.19",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhoai/odh-rhel8-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "sha256:43a8904396e55074ffb1afcfcd8fe6db0edcbc918a8ff8301b6b0920aea7eabf",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_ai:2.19::el8"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 2.21",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhoai/odh-rhel9-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "sha256:db339d2d4f86af4efa695ef193d19e26b25fec80017fa2780833a4cd944e383b",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_ai:2.21::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 2.22",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhoai/odh-rhel9-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "sha256:dccc7c6cf920da7ffeadbad42f5727f2d58d54ceef399ac98441345d06ff10c4",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_ai:2.22::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 2.24",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhoai/odh-rhel9-operator",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "sha256:12c1d1066e75951aad1d333bcbc1675ba7a795b57744294c23decec1655709c7",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_ai:2.24::el9"
    ]
  }
]