Description (CNA)
A flaw was found in the OpenShift Lightspeed Service, which is vulnerable to unauthenticated API request flooding. Repeated queries to non-existent endpoints inflate metrics storage and processing, consuming excessive resources. This issue can lead to monitoring system degradation, increased disk usage, and potential service unavailability. Since the issue does not require authentication, an external attacker can exhaust CPU, RAM, and disk space, impacting both application and cluster stability.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 before 88f9dc91856593d878b60ad9a67ffee8d4621ba5 |
| Red Hat / OpenShift Lightspeed | unaffected |
CWE
CWE-400
References
- https://access.redhat.com/security/cve/CVE-2025-2586
- https://bugzilla.redhat.com/show_bug.cgi?id=2353998
- https://github.com/openshift/lightspeed-service/pull/2369
ADP enrichment
No English description supplied.
No references supplied.