Paper/Archive/CVE-2025-12548

CVE-2025-12548

Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 — Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333

EPSS 1%CVSS 9.0

critical.is priorityof 100

CVSS 9.0 (CNA)9.0 / 10 × 3027.0 Not in CISA KEV+300.0 EPSS percentile 70.4.704 × 2014.1 No public exploit+100.0 SSVC exploitation: none+100.0

Description · from the CVE record

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.

Affected

ProductAffectedFixed inSource

Red Hat OpenShift Dev Spaces (RHOSDS) 3.22see advisory3.22.1-1763525702CNA

Red Hat OpenShift Dev Spaces (RHOSDS) 3.23see advisory3.23.1-1763508770CNA

Red Hat OpenShift Dev Spaces (RHOSDS) 3.24see advisory3.24.1-1763547630CNA

Scores by source

redhat (CNA)9.0CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total

References

advisoryaccess.redhat.com/errata/RHSA-2025:22620 advisoryaccess.redhat.com/errata/RHSA-2025:22623 advisoryaccess.redhat.com/errata/RHSA-2025:22652 refaccess.redhat.com/security/cve/CVE-2025-12548 refbugzilla.redhat.com/show_bug.cgi?id=2408850