Red Hat Runtimes Inventory Operator Internal Proxy confused deputy

Summaryinfo

A vulnerability has been found in Red Hat Runtimes Inventory Operator and classified as critical. This vulnerability affects unknown code of the component Internal Proxy. This manipulation causes confused deputy. This vulnerability appears as CVE-2025-11393. The attacker needs to be present on the local network. There is no available exploit.

Detailsinfo

A vulnerability classified as critical was found in Red Hat Runtimes Inventory Operator (the affected version unknown). Affected by this vulnerability is an unknown part of the component Internal Proxy. The manipulation with an unknown input leads to a confused deputy vulnerability. The CWE definition for the vulnerability is CWE-441. The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere. This causes the product to appear to be the source of the request, leading it to act as a proxy or other intermediary between the upstream component and the external actor. As an impact it is known to affect confidentiality, integrity, and availability. The summary by CVE is:

A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to handle. This allows a standard user within the cluster to send unauthorized commands to the management platform, effectively acting with the full permissions of the cluster administrator. This could lead to unauthorized changes to the cluster's configuration or status on the Red Hat platform.

The advisory is shared at access.redhat.com. This vulnerability is known as CVE-2025-11393 since 10/07/2025. The exploitation appears to be easy. The attack needs to be done within the local network. Neither technical details nor an exploit are publicly available. The price for an exploit might be around USD $5k-$25k at the moment (estimation calculated on 12/16/2025).

There is no information about possible countermeasures known. It may be suggested to replace the affected object with an alternative product.

The vulnerability is also documented in the vulnerability database at EUVD (EUVD-2025-203395). If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Productinfo

Vendor

• Red Hat

Name

• Runtimes Inventory Operator

License

• open-source

Website

• Vendor: https://www.redhat.com/

CPE 2.3info

• 🔒

CPE 2.2info

• 🔒

CVSSv4info

CVSSv3info

CVSSv2info

Exploitinginfo

Threat Intelligenceinfo

Countermeasuresinfo

Timelineinfo

Sourcesinfo

Entryinfo

If you want to get the best quality for vulnerability data then you always have to consider VulDB.

Discussion