CVE-2025-2586

Name of the Vulnerable Software and Affected Versions OpenShift Lightspeed Service (affected versions not specified)

Description The OpenShift Lightspeed Service is susceptible to unauthenticated API request flooding. An external attacker can send repeated queries to non-existent endpoints, which inflates metrics storage and processing. This resource exhaustion affects CPU, RAM, and disk space, potentially leading to monitoring system degradation and service unavailability, impacting the stability of both the application and the cluster.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.