Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 vulnerabilities
🔔 Create alert RSS Version checker
Published CVEs affecting Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24: 2 record(s), with affected versions and fixes.
CVE-2025-12548
Critical · 9.0
Public exploit CWE-306 Jan 13, 2026
Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333
A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.
CVE-2025-9566
High · 8.1
CWE-22 Sep 5, 2025
Podman: podman kube play command may overwrite host files
There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, the attacker can only control the target file to be overwritten but not the content to be written into the file.
Binary-Affected: podman
Upstream-version-introduced: v4.0.0
Upstream-version-fixed: v5.6.1