CVE-2025-11393

A flaw was found in runtimes-inventory-rhel8-operator. An internal proxy component is incorrectly configured. Because of this flaw, the proxy attaches the cluster's main administrative credentials to any command it receives, instead of only the specific reports it is supposed to handle. This allows a standard user within the cluster to send unauthorized commands to the management platform, effectively acting with the full permissions of the cluster administrator. This could lead to unauthorized changes to the cluster's configuration or status on the Red Hat platform.

• CWE-441

• https://access.redhat.com/errata/RHSA-2025:23236
• https://access.redhat.com/security/cve/CVE-2025-11393
• https://bugzilla.redhat.com/show_bug.cgi?id=2402032

Published

Dec 15, 2025

Last Modified

Aug 8, 2026

Status

Deferred

• How Strix found a critical auth bypass in etcdStrix autonomously discovered a critical authentication bypass in etcd, later designated CVE-2026-33413.
• Autonomous PentestingAI agents that find and validate exploitable vulnerabilities like this one across your applications.
• PR ReviewsPentest every pull request so vulnerable code is caught before it ships to production.
• AI Penetration TestingHow AI-driven penetration testing continuously covers your attack surface.

• CVE-2025-11387A vulnerability was determined in Tenda AC15 15.03.05.18. Th…8.8
• CVE-2025-11388A vulnerability was identified in Tenda AC15 15.03.05.18. Th…8.8
• CVE-2025-11389A security flaw has been discovered in Tenda AC15 15.03.05.1…8.8
• CVE-2025-1139IBM Edge Application Manager 4.5 could allow a local user to…4.4
• CVE-2025-11390A weakness has been identified in PHPGurukul Cyber Cafe Mana…6.1
• CVE-2025-11391The PPOM – Product Addons & Custom Fields for WooCommerce pl…9.8
• CVE-2025-11396A vulnerability was identified in code-projects Simple Food …9.8
• CVE-2025-11397A security flaw has been discovered in SourceCodester Hotel …9.8
• CVE-2025-11398A weakness has been identified in SourceCodester Hotel and L…8.8
• CVE-2025-11399A security vulnerability has been detected in SourceCodester…9.8
• CVE-2025-11400A vulnerability was detected in SourceCodester Hotel and Lod…9.8
• CVE-2025-11401A flaw has been found in SourceCodester Hotel and Lodge Mana…9.8