CVE-2025-6193 — Vulnetix

Try Vulnetix Request Demo

CVE-2025-6193 PUBLISHED CVSS 5.900000095367432 MEDIUM

A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod's terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.

EPSS 0.10% · 28.0th percentile

Risk Scores

CVSS v3.1

5.900000095367432

CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L

EPSS Score

0.10%

28.0th percentile

Affected Products

Vendor	Product	Versions
		0
Red Hat	Red Hat OpenShift AI (RHOAI)
Red Hat	Red Hat OpenShift AI (RHOAI)
Red Hat	Red Hat OpenShift AI (RHOAI)
Red Hat	Red Hat OpenShift AI 2.16	*
Red Hat	Red Hat OpenShift AI (RHOAI)

Timeline

Jun 20, 2025 Coalition ESS Score
Jun 20, 2025 CVE Published
Jun 20, 2025 PoC Published
Jun 20, 2025 PoC Published
Jun 21, 2025 EPSS Score
Jun 23, 2025 Coalition ESS Score
Jul 1, 2025 EPSS Score
Jul 10, 2025 EPSS Score
Jul 10, 2025 Coalition ESS Score
Jul 15, 2025 Coalition ESS Score
Jul 20, 2025 EPSS Score
Jul 29, 2025 EPSS Score

References

RHSA-2026:5807 vendor-advisory
https://access.redhat.com/security/cve/CVE-2025-6193 vdb
RHBZ#2374032 issue
https://github.com/trustyai-explainability/trustyai-service-operator/pull/504 url
https://nvd.nist.gov/vuln/detail/CVE-2025-6193 advisory

Open in Interactive Console →