by Kastro CVE-2025-69872
Red Hat Red Hat OpenShift AI 3.3 — DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default.
Description · from the CVE record
DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.
Affected
ProductAffectedFixed inSource
n/an/a–CNA
Red Hat OpenShift AI 3.3see advisory1770754605redhat-SADP
Red Hat Satellite 6.18see advisory1782739344redhat-SADP
Red Hat AI Inference Serversee advisory–redhat-SADP
Red Hat AI Inference Serversee advisory–redhat-SADP
Red Hat AI Inference Serversee advisory–redhat-SADP
Red Hat AI Inference Serversee advisory–redhat-SADP
Red Hat AI Inference Serversee advisory–redhat-SADP
Red Hat Enterprise Linux AI (RHEL AI) 3see advisory–redhat-SADP
Red Hat Enterprise Linux AI (RHEL AI) 3see advisory–redhat-SADP
Red Hat Enterprise Linux AI (RHEL AI) 3see advisory–redhat-SADP
Red Hat Enterprise Linux AI (RHEL AI) 3see advisory–redhat-SADP
Scores by source
CISA ADP9.8CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:H
redhat-SADP (CNA)7.6CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:U/C:H/I:H/A:L
CISA ADPSSVCExploitation: poc · Automatable: yes · Technical impact: total