Red Hat Reels from OpenShift AI Flaw and GitHub Breach
Red Hat is facing mounting cybersecurity challenges following the disclosure of a critical vulnerability in its OpenShift AI platform and confirmed a breach of its private GitHub repositories by the Crimson Collective. The flaw, tracked as CVE-2025-10725 (rated 9.9/10 CVSS), allows low-privileged authenticated users (such as data scientists using Jupyter notebooks) to escalate privileges to full cluster administrator, enabling total compromise of cluster confidentiality, integrity, and availability across versions 2.19, 2.21, and RHOAI. In parallel, Crimson Collective claims to have exfiltrated 570GB of data from 28,000 internal Red Hat projects, including proprietary code, client infrastructure details, and potentially exploitable configurations, though Red Hat disputes the scale of the theft. The group has leaked samples on underground forums alongside extortion demands, raising the specter of supply-chain risks for global enterprises dependent on OpenShift, Enterprise Linux, and other Red Hat technologies. These twin incidents highlight the heightened targeting of open-source ecosystems and underscore the need for zero-trust architectures, granular access controls, stronger repository security practices, and proactive credential hygiene. Red Hat is working with law enforcement, and CTIX analysts urge customers to follow the Red Hat guidance, rotating credentials, reviewing permissions, and adhering to the principle of least privilege while it investigates and mitigates the full scope of the threats.