CVE-2025-12805CWE-653

Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy

High · published March 26, 2026

CVSS v3.1
8.1
EPSS
0%
Percentile
31.1
In the wild
Unconfirmed
What it is

A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.

The record
Technical detail
CVSS v3.1
8.1 · HIGH
Vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:N
CVSS v4.0
Not supplied
EPSS
0.00383 · 31.1th percentile
Weakness
CWE-653 · Improper Isolation or Compartmentalization
Published
2026-03-26T21:48Z
EPSS history
Timeline
  • 26 MAR 21:48Z
    Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy
    cvelistv5