VDB
CVE-2025-6193
CVE-2025-6193
PUBLISHED
CVSS 5.900000095367432 MEDIUM
A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod's terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.
EPSS 0.39% · 60.1th percentile
Risk Scores
CVSS 3.1
5.900000095367432
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
EPSS Score
0.39%
60.1th percentile
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| 0 | ||
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI 2.16 | * |
| Red Hat | Red Hat OpenShift AI (RHOAI) |
Timeline
- Jun 20, 2025 Coalition ESS Score
- Jun 20, 2025 CVE Published
- Jun 20, 2025 PoC Published
- Jun 20, 2025 PoC Published
- Jun 21, 2025 EPSS Score
- Jun 23, 2025 Coalition ESS Score
- Jul 1, 2025 EPSS Score
- Jul 10, 2025 Coalition ESS Score
- Jul 11, 2025 EPSS Score
- Jul 15, 2025 Coalition ESS Score
- Jul 21, 2025 EPSS Score
- Jul 31, 2025 EPSS Score