CVE-2025-2515

Name of the Vulnerable Software and Affected Versions BlueChi (affected versions not specified)

Description BlueChi, a multi-node systemd service controller used in RHIVOS, contains a flaw involving unrestricted cross-node systemd dependencies. This allows a user with root privileges on a managed node (qm) to create or override systemd service unit files that affect the host node, potentially leading to privilege escalation, unauthorized service execution, and system compromise.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.