CVE & CISA-KEV CatalogNVD
CVE-2025-6193
MEDIUM5.9
CVSS v3
Description
A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod's terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.
How to fix
Remediation Available
registry.redhat.io/rhoai/odhRed Hat / RHEL
Fixed in:operator-bundle@sha256:9407349c0fbf8d8be227d61d21e4ca9cc2d640c18ca040dfd94c33f0b1250f29_amd64RHSA-2026:5807
Fixed in:dashboard-rhel8@sha256:022c21f044dead0ff28bfc5fb5fb2fd51f3ed8e1a6cfc90bd18222abf0388018_amd64RHSA-2026:5807
Fixed in:rhel8-operator@sha256:2e62a8a86b30347004012213f9af230d957cbb3f96771aa68490be6a3e22d949_amd64RHSA-2026:5807
Fixed in:modelmesh-rhel8@sha256:abdb41f0a3c3f60094b48b2b69545968292446e3a609c42fdb51f27b4ef7ae81_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odhRocky
Fixed in:rhel8-operator@sha256:2e62a8a86b30347004012213f9af230d957cbb3f96771aa68490be6a3e22d949_amd64RHSA-2026:5807
Fixed in:operator-bundle@sha256:9407349c0fbf8d8be227d61d21e4ca9cc2d640c18ca040dfd94c33f0b1250f29_amd64RHSA-2026:5807
Fixed in:modelmesh-rhel8@sha256:abdb41f0a3c3f60094b48b2b69545968292446e3a609c42fdb51f27b4ef7ae81_amd64RHSA-2026:5807
Fixed in:dashboard-rhel8@sha256:022c21f044dead0ff28bfc5fb5fb2fd51f3ed8e1a6cfc90bd18222abf0388018_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-codeflareRed Hat / RHEL
Fixed in:operator-rhel8@sha256:b68b73951beeabe942be43f65e778ff98e1cdfc6fdb4b052794f0cd4b191b819_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-codeflareRocky
Fixed in:operator-rhel8@sha256:b68b73951beeabe942be43f65e778ff98e1cdfc6fdb4b052794f0cd4b191b819_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-data-science-pipelines-argoRocky
Fixed in:workflowcontroller-rhel8@sha256:4e77720ec7972239d2b5198afc01ebd5dd777a1f75c2d19dbfeeb44f7adf729c_amd64RHSA-2026:5807
Fixed in:argoexec-rhel8@sha256:fd02f0f70e38c947cdc307be3d9660f87262d92c5a361fa1bf68f24a72c91476_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-data-science-pipelines-argoRed Hat / RHEL
Fixed in:argoexec-rhel8@sha256:fd02f0f70e38c947cdc307be3d9660f87262d92c5a361fa1bf68f24a72c91476_amd64RHSA-2026:5807
Fixed in:workflowcontroller-rhel8@sha256:4e77720ec7972239d2b5198afc01ebd5dd777a1f75c2d19dbfeeb44f7adf729c_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-data-science-pipelines-operatorRed Hat / RHEL
Fixed in:controller-rhel8@sha256:64b60a2fcfb9806422127db0a7c42f665fa41f47cbe8fe2b98c6bc20b6a1bf28_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-data-science-pipelines-operatorRocky
Fixed in:controller-rhel8@sha256:64b60a2fcfb9806422127db0a7c42f665fa41f47cbe8fe2b98c6bc20b6a1bf28_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-kf-notebookRed Hat / RHEL
Fixed in:controller-rhel8@sha256:b26f5118ae8e7e25783233698fe0d5df1e56cde8d75f745204d9f78c4d838412_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-kf-notebookRocky
Fixed in:controller-rhel8@sha256:b26f5118ae8e7e25783233698fe0d5df1e56cde8d75f745204d9f78c4d838412_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-kuberay-operatorRed Hat / RHEL
Fixed in:controller-rhel8@sha256:9855fe0311c11b91fa38d205a65c0ad41b9447267408b3e7eb8f9b4c1d727acf_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-kuberay-operatorRocky
Fixed in:controller-rhel8@sha256:9855fe0311c11b91fa38d205a65c0ad41b9447267408b3e7eb8f9b4c1d727acf_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-kueueRed Hat / RHEL
Fixed in:controller-rhel8@sha256:f38932929d45522b0cfd9e2dd87682a3495688aad859b3a8dac51398860e0e95_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-kueueRocky
Fixed in:controller-rhel8@sha256:f38932929d45522b0cfd9e2dd87682a3495688aad859b3a8dac51398860e0e95_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-ml-pipelinesRocky
Fixed in:driver-rhel8@sha256:0a30729330611926e635ec292bac2f5b7ce9f677aaff7f84b23549b2bbbd506d_amd64RHSA-2026:5807
Fixed in:launcher-rhel8@sha256:b82bbdac9d911544af8bc55ce7e688610be23cf6c31676af30fea76e3613d125_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-ml-pipelinesRed Hat / RHEL
Fixed in:driver-rhel8@sha256:0a30729330611926e635ec292bac2f5b7ce9f677aaff7f84b23549b2bbbd506d_amd64RHSA-2026:5807
Fixed in:launcher-rhel8@sha256:b82bbdac9d911544af8bc55ce7e688610be23cf6c31676af30fea76e3613d125_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-ml-pipelines-api-serverRed Hat / RHEL
Fixed in:v2-rhel8@sha256:c46e2392d44830fc612d1dc41ed953352dadcef696bc50a848d2cc5de694e1ca_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-ml-pipelines-api-serverRocky
Fixed in:v2-rhel8@sha256:c46e2392d44830fc612d1dc41ed953352dadcef696bc50a848d2cc5de694e1ca_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagentRocky
Fixed in:v2-rhel8@sha256:9cfe909d46447d1dad8fd6a2319873d43b680b260d31f009eb086e22ad706f16_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-ml-pipelines-persistenceagentRed Hat / RHEL
Fixed in:v2-rhel8@sha256:9cfe909d46447d1dad8fd6a2319873d43b680b260d31f009eb086e22ad706f16_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflowRed Hat / RHEL
Fixed in:v2-rhel8@sha256:87129d071d526f8e4fe597f23ea169bf3920e0d52b7a7698e8c5685ef84b8f4a_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflowRocky
Fixed in:v2-rhel8@sha256:87129d071d526f8e4fe597f23ea169bf3920e0d52b7a7698e8c5685ef84b8f4a_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-mlmd-grpcRocky
Fixed in:server-rhel8@sha256:07d85d51bfd8caddf447d7ea8c9b0c30879c03d8c3b9110cb86fc54e63ff0b48_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-mlmd-grpcRed Hat / RHEL
Fixed in:server-rhel8@sha256:07d85d51bfd8caddf447d7ea8c9b0c30879c03d8c3b9110cb86fc54e63ff0b48_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-mm-restRocky
Fixed in:proxy-rhel8@sha256:ace145ce198785d2b587c4206d915f3c0e0ebe0b051cdd16ccc82cbc74e11352_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-mm-restRed Hat / RHEL
Fixed in:proxy-rhel8@sha256:ace145ce198785d2b587c4206d915f3c0e0ebe0b051cdd16ccc82cbc74e11352_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-modelRed Hat / RHEL
Fixed in:controller-rhel8@sha256:a880b9fd06cd7206e3397025371ba3a3655798be5d64bed620f3847ff6a0b5ac_amd64RHSA-2026:5807
Fixed in:registry-rhel8@sha256:14245353d924e3416f1b637ba1fec18a3218d9402965ff0acdfd2497e294f9ae_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-modelRocky
Fixed in:registry-rhel8@sha256:14245353d924e3416f1b637ba1fec18a3218d9402965ff0acdfd2497e294f9ae_amd64RHSA-2026:5807
Fixed in:controller-rhel8@sha256:a880b9fd06cd7206e3397025371ba3a3655798be5d64bed620f3847ff6a0b5ac_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-model-registryRocky
Fixed in:operator-rhel8@sha256:8b7e95c316a28938a37b885d3e5c0503728add4b75066f3953430e5385dcacf5_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-model-registryRed Hat / RHEL
Fixed in:operator-rhel8@sha256:8b7e95c316a28938a37b885d3e5c0503728add4b75066f3953430e5385dcacf5_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-modelmesh-runtimeRed Hat / RHEL
Fixed in:adapter-rhel8@sha256:a291cd5f04c559fd16477ae2ad364a350c4bf0c5a3f5aa2e614260fd4a5bece2_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-modelmesh-runtimeRocky
Fixed in:adapter-rhel8@sha256:a291cd5f04c559fd16477ae2ad364a350c4bf0c5a3f5aa2e614260fd4a5bece2_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-modelmesh-servingRed Hat / RHEL
Fixed in:controller-rhel8@sha256:ae2514c29fedec9401a594ca3fe5e7ca132d23f2f2a1966b5f6cc7bb8b99d75b_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-modelmesh-servingRocky
Fixed in:controller-rhel8@sha256:ae2514c29fedec9401a594ca3fe5e7ca132d23f2f2a1966b5f6cc7bb8b99d75b_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-notebookRed Hat / RHEL
Fixed in:controller-rhel8@sha256:aa551353c01d864361785cded067ec32e5bb3e478964aa540749b6a23f93b4db_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-notebookRocky
Fixed in:controller-rhel8@sha256:aa551353c01d864361785cded067ec32e5bb3e478964aa540749b6a23f93b4db_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-trainingRocky
Fixed in:operator-rhel8@sha256:6617c8beeb481dd39ae877b08361a377bc946fdf97787445bbec5bb3a0a0be1c_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-trainingRed Hat / RHEL
Fixed in:operator-rhel8@sha256:6617c8beeb481dd39ae877b08361a377bc946fdf97787445bbec5bb3a0a0be1c_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-trustyaiRocky
Fixed in:service-rhel8@sha256:92571ea118c1b28b480cd40c1006e8d057e959cd2fd8e01f300926ccadd46fc7_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-trustyaiRed Hat / RHEL
Fixed in:service-rhel8@sha256:92571ea118c1b28b480cd40c1006e8d057e959cd2fd8e01f300926ccadd46fc7_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-trustyai-serviceRocky
Fixed in:operator-rhel8@sha256:297d22ca72b764328f7d0b85f7f7c013c91ca85d70f08be45a6689c85da6b311_amd64RHSA-2026:5807
registry.redhat.io/rhoai/odh-trustyai-serviceRed Hat / RHEL
Fixed in:operator-rhel8@sha256:297d22ca72b764328f7d0b85f7f7c013c91ca85d70f08be45a6689c85da6b311_amd64RHSA-2026:5807
Remediation is compiled from vendor and distribution security advisories. Always confirm against the linked source for your exact version and platform.
CVSS v3 Vector
Exploitability
Attack VectorNetwork
Attack ComplexityLow
Privileges RequiredHigh
User InteractionRequired
ScopeChanged
Impact
ConfidentialityLow
IntegrityLow
AvailabilityLow
CVSS:3.1/AV:N/AC:L/PR:H/UI:R/S:C/C:L/I:L/A:L
Exploit Intelligence
0.76%probability of exploitation in 30 days
51stpercentile
Moderate risk: more likely to be exploited than 51% of all known CVEs.
References
Other references4
Related Vulnerabilities
Other CWE-78 (OS Command Injection) vulnerabilities, ordered by exploit likelihood. View all
| CVE | Severity | CVSS | EPSS | Exploited | Fix |
|---|---|---|---|---|---|
| CVE-2021-1498 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2014-6271 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2019-16920 | Critical | 9.8 | 100% | KEV | - |
| CVE-2022-44877 | Critical | 9.8 | 100% | KEV | Fix |
| CVE-2020-8515 | Critical | 9.8 | 100% | KEV | - |
| CVE-2020-9054 | Critical | 9.8 | 100% | KEV | Fix |
Embed a live status badge for CVE-2025-6193
Markdown
[](https://tridentstack.com/cve/CVE-2025-6193)HTML
<a href="https://tridentstack.com/cve/CVE-2025-6193"><img src="https://tridentstack.com/cve/badge/CVE-2025-6193.svg" alt="CVE-2025-6193"></a>Find and fix vulnerabilities across your fleet
TridentStack Control continuously scans your Windows, macOS, and Linux fleet for known vulnerabilities, prioritizes them by severity and active exploitation, and patches them automatically.
Start freeThis product uses NVD data but is not endorsed or certified by the NVD. EPSS scores courtesy of FIRST.org (https://www.first.org/epss). Source: CISA KEV Catalog. Data as of 2026-03-25.