What’s Vulnerable › Vulnerabilities

CVE-2025-6193: Trustyai-explainability: command injection via lmevaljob cr

• Severity: medium (CVSS 5.9 v3.1)
• Exploited in the wild: not listed in CISA KEV
• EPSS: 0.7% probability of exploitation in the next 30 days
• Public exploit or detection template: none known
• Published: 2025-06-20 · updated 2026-10-09
• Weakness: CWE-78

Description

A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod's terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.

Affected products

• Red Hat OpenShift AI 2.16: all versions — fixed in 1774285579
• Red Hat OpenShift AI (RHOAI): all versions

How to fix

Upgrade to a fixed version: Red Hat OpenShift AI 2.16 1774285579. Check the vendor advisory for mitigations.

References

• https://access.redhat.com/errata/RHSA-2026:5807
• https://access.redhat.com/security/cve/CVE-2025-6193
• https://bugzilla.redhat.com/show_bug.cgi?id=2374032
• https://github.com/trustyai-explainability/trustyai-service-operator/pull/504

Get alerted when CVE-2025-6193 or the next vulnerability affects your stack