CVE-2025-5417
Medium
Description
An insufficient access control vulnerability was found in the Red Hat Developer Hub rhdh/rhdh-hub-rhel9 container image. The Red Hat Developer Hub cluster admin/user, who has standard user access to the cluster, and the Red Hat Developer Hub namespace, can access the rhdh/rhdh-hub-rhel9 container image and modify the image's content. This issue affects the confidentiality and integrity of the data, and any changes made are not permanent, as they reset after the pod restarts.
SeverityMedium
CVSS6.1
Exploit probability—
Product
Red Hat Developer Hub
PublishedAug 19, 2025
First seenAug 19, 2025
Weakness typeCWE-266CWE-266
How to fix
Update
- Red Hat Red Hat Developer Hub1.7.0 or later
Vendor advisories
Affected products
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat Red Hat Developer Hub | v < 1.7.0 | 1.7.0 |
| rhdh 1.7 | No range specified | — |
Check your version
Choose the product and enter the version you run to see whether it falls in the affected range.
In the Intelligence 360 plan
Attack Surface Management
See the assets tied to your domains, the technologies they run and known vulnerabilities in one list.