CyberRota Analysis
This is a high severity vulnerability with a CVSS score of 8.1. See the original NVD description below for full technical details.
CVE
CVE-2025-12805
Severity
HIGH
CVSS
8.1
EPSS
0.38%
Original NVD Description
A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.
Related CVEs
Other vulnerabilities affecting the same vendor(s)