Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 vulnerabilities

2 known vulnerabilities in Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 from Red Hat. 2 are rated high or critical. Each entry lists the affected versions and the release that fixes it, where the vendor has published one.

Latest first

• 9.0 Critical severity

  Red Hat OpenShift Dev Spaces (RHOSDS) 3.22: Missing Authentication for Critical Functionality

  CVE-2025-12548Jan 13, 2026Red HatEPSS 1.31%

  A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC /

• 8.1 High severity

  Red Hat Enterprise Linux 10: Improper Limitation of a Pathname to a Restricted Directory

  CVE-2025-9566Sep 5, 2025Red HatEPSS 1.21%

  There's a vulnerability in podman where an attacker may use the kube play command to overwrite host files when the kube file container a Secrete or a ConfigMap volume mount and such volume contains a symbolic link to a host file path. In a successful attack, t