Jon Weiser

**Name of the Vulnerable Software and Affected Versions** Pen Drive report generator (affected versions not specified) **Description** An issue exists where cluster-sourced data is rendered into HTML reports without proper escaping or sanitization. This allows an attacker with cluster administrator privileges to inject a stored cross-site scripting (XSS) payload—a technique where malicious scripts are permanently stored on a target server—into cluster objects, such as the `spec.channel` variable of the ClusterVersion. The script then executes in the browser of any user who opens the generated HTML report. **Recommendations** At the moment, there is no information about a newer version that contains a fix for this vulnerability.

**Name of the Vulnerable Software and Affected Versions** Red Hat OpenShift AI versions 2.19 through 2.21 **Description** A critical flaw exists in Red Hat OpenShift AI Service that allows a low-privileged authenticated user, such as a data scientist using a Jupyter notebook, to escalate their privileges to a full cluster administrator. Successful exploitation grants the attacker complete control over the cluster, including the ability to steal sensitive data, disrupt services, and compromise the underlying infrastructure. The vulnerability is due to an overly permissive ClusterRoleBinding associating the `kueue-batch-user-role` with the `system:authenticated` group. The vulnerability has a CVSS score of 9.9, indicating a critical risk. Reports suggest that Crimson Collective, a recently formed ransomware group, may have exploited undisclosed vulnerabilities in Red Hat products, though it is not confirmed if this is related to CVE-2025-10725. **Recommendations** For OpenShift AI versions 2.19 through 2.21, enforce the principle of least privilege. Restrict broad permissions granted to system-level groups. Audit and review ClusterRoleBindings to ensure appropriate access control. Monitor for suspicious job-creation activity.