CVE-2025-12805

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift AI (RHOAI) llama-stack-operator (affected versions not specified)

Description A flaw exists in Red Hat OpenShift AI (RHOAI) llama-stack-operator that allows unauthorized access to Llama Stack services deployed in other namespaces through direct network requests. This occurs because no NetworkPolicy restricts access to the llama-stack service endpoint. Consequently, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.