A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Devel…
严重 CVSS 9.0
摘要
A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.
中文摘要建设中，暂以英文摘要呈现（DR-003 v2）。
深度研判
该漏洞尚未生成深度研判报告（DR-003 v2 AI pipeline 建设中）。
数据来源
- NVD DATABASE
原始链接
- https://access.redhat.com/errata/RHSA-2025:22620
- https://access.redhat.com/errata/RHSA-2025:22623
- https://access.redhat.com/errata/RHSA-2025:22652
- https://access.redhat.com/security/cve/CVE-2025-12548
- https://bugzilla.redhat.com/show_bug.cgi?id=2408850
时间线
- nvd_ingest NVD