GO-2025-4241 — Vulnetix

GO-2025-4241 PUBLISHED

Misconfigured Internal Proxy in runtimes-inventory-rhel8-operator Grants Standard Users Full Cluster Administrator Access in github.com/RedHatInsights/runtimes-inventory-operator

Affected Products

Vendor	Product	Versions
github.com	RedHatInsights/runtimes-inventory-operator	0, 0

Timeline

Dec 22, 2025 CVE Published
Mar 3, 2026 CVE Updated
May 1, 2026 Distribution Patch
May 1, 2026 Security Advisory

References

https://github.com/advisories/GHSA-cc8c-28gj-px38 advisory
https://nvd.nist.gov/vuln/detail/CVE-2025-11393 advisory
https://access.redhat.com/errata/RHSA-2025:23236 url
https://access.redhat.com/security/cve/CVE-2025-11393 url
https://bugzilla.redhat.com/show_bug.cgi?id=2402032 url

Open in Interactive Console →