What’s Vulnerable › Products

metal3-io baremetal-operator vulnerabilities

3 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 1 published in the last 12 months.

Check whether your metal3-io baremetal-operator version is affected

Latest metal3-io baremetal-operator vulnerabilities

• CVE-2025-29781 — Bare Metal Operator (BMO) can expose any secret from other namespaces via BMCEventSubscription CRD (CVSS 6.5)
• CVE-2024-43803 — BMO can expose particularly named secrets from other namespaces via BMH CRD (CVSS 4.9)
• CVE-2023-30841 — Ironic and ironic-inspector deployed within Baremetal Operator may expose as ConfigMaps (CVSS 5.5)