Skip to content
Fencer Vulns
critical 9.0

CVE-2025-12548 json

Github.com/che-incubator/che-code: eclipse che — unauthenticated rce and secret exfiltration via tcp/3333

published 2026-01-13 9 mo ago modified 2026-09-21 48 d ago also EUVD-2026-2332

cvss
9.0
version 3.1, CNA
cisa kev
Not listed
not in CISA's catalog
epss
1.3%
EPSS 1.3% chance of exploitation in 30 days, percentile 70%
public exploits
1
Metasploit

Summary

A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.

Patch / fix

  • Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 3.22.1-1763525702
  • Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.23 3.23.1-1763508770
  • Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 3.24.1-1763547630

Vendor advisories

What the vendors themselves say about their products: affected, fixed or not affected, and what to do.

red hat product security vex CVE-2025-12548 updated cvss 9.0

github.com/che-incubator/che-code: Eclipse Che — unauthenticated RCE and secret exfiltration via TCP/3333

  • Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 devspaces 3.22.1-1763525702
    fixed: vendor fix RHSA-2025:22620
  • Red Hat OpenShift Dev Spaces (RHOSDS) 3.23 devspaces 3.23.1-1763508770
    fixed: vendor fix RHSA-2025:22652
  • Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 devspaces 3.24.1-1763547630
    fixed: vendor fix RHSA-2025:22623
  • Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 devspaces 3.22.1-1763584491 Red Hat OpenShift Dev Spaces (RHOSDS) 3.23 devspaces 3.23.1-1763584215 Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 devspaces 3.24.1-1763584739
    not affected: vulnerable code not present

Red Hat CSAF VEX © Red Hat, Inc., from https://security.access.redhat.com/data/csaf/v2/vex/; changed: reduced to product statuses and remediations. CC BY 4.0 · csaf

Timeline

  1. First public exploit (Metasploit exploit/linux/http/eclipse_che_machine_exec_rce)
  2. Published

CISA SSVC

Exploitation
none
Automatable
no
Technical impact
total
Assessed
9 mo ago

Exploit prediction

1.30% chance of exploitation in the next 30 days, higher than 70% of all scored CVEs (FIRST EPSS, 2026-11-08).

Exploits and checks

CVSS scores

assigned by version score vector
CNA 3.1 9.0 CVSS:3.1/AV:N/AC:L/PR:L/UI:R/S:C/C:H/I:H/A:H

Affected products

  • Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.22
  • Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.23
  • Red Hat Red Hat OpenShift Dev Spaces (RHOSDS) 3.24

Classification

Weakness
  • CWE-306 Missing Authentication for Critical Functionality

References

Sources

Fencer Vulns keeps one entry per vulnerability: the CVE id wins, then GHSA, and records that alias each other are merged, except that two CVEs always keep separate entries. The same data is available as JSON.