Skip to content
CVE PROGRAM SOURCE RECORD8.4 High

CVE-2025-12985

License Service: Privilege escalation vulnerability

Description

IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Licensing Operator image.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

IBM IBM Licensing Operator

Default version status: unaffected

  • 9.0.0affected
  • 9.0.1affected
  • 9.1.0affected
  • 9.2.0affected

References