CVE-2025-2515

A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS. This flaw allows a user with root privileges on a managed node (qm) to create or override systemd service unit files that affect the host node. This issue can lead to privilege escalation, unauthorized service execution, and potential system compromise.

CVSS v3 7.2 HIGH

7.2^/10

CVSS v3 : HIGH

Vector :

Exploitability : 0.5 / Impact : 6.0

Attack Vector PHYSICAL

Attack Complexity LOW

Privileges Required HIGH

User Interaction NONE

Confidentiality Impact HIGH

Integrity Impact HIGH

Availability Impact HIGH

Scope CHANGED

References

Link	Resource
https://access.redhat.com/security/cve/CVE-2025-2515
https://bugzilla.redhat.com/show_bug.cgi?id=2353313
https://github.com/eclipse-bluechi/bluechi/commit/fe0d28301ce2bd45f0b1d8a98a94efef799fbc73#diff-64140c83db42a8888f346a40de293b80f79ebf7d75ce4137b22567e360bce607
https://github.com/eclipse-bluechi/bluechi/issues/1069
https://github.com/eclipse-bluechi/bluechi/pull/1073

Configurations

No configuration.

History

07 Oct 2026, 13:10

Type	Values Removed	Values Added
Summary		(es) Se encontró una vulnerabilidad en BlueChi, un controlador de servicios systemd multinodo utilizado en RHIVOS. Esta falla permite a un usuario con privilegios de root en un nodo gestionado (qm) crear o sobrescribir archivos de unidad de servicio systemd que afectan al nodo anfitrión. Este problema puede llevar a una escalada de privilegios, ejecución de servicios no autorizada y un posible compromiso del sistema.

Information

Published : 2025-12-24 17:15

Updated : 2026-10-07 13:10

NVD link : CVE-2025-2515

Mitre link : CVE-2025-2515

CVE.ORG link : CVE-2025-2515

JSON object : View

Products Affected

No product.

CWE

CWE-863

Incorrect Authorization

{"id": "CVE-2025-2515", "cveTags": [], "metrics": {"ssvcV203": [{"source": "134c704f-9b21-4f2e-91b3-4a467353bcc0", "ssvcData": {"id": "CVE-2025-2515", "role": "CISA Coordinator", "options": [{"exploitation": "none"}, {"automatable": "no"}, {"technicalImpact": "total"}], "version": "2.0.3", "timestamp": "2025-12-24T16:48:09.209864Z"}}], "cvssMetricV31": [{"type": "Secondary", "source": "secalert@redhat.com", "cvssData": {"scope": "CHANGED", "version": "3.1", "baseScore": 7.2, "attackVector": "PHYSICAL", "baseSeverity": "HIGH", "vectorString": "CVSS:3.1/AV:P/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:H", "integrityImpact": "HIGH", "userInteraction": "NONE", "attackComplexity": "LOW", "availabilityImpact": "HIGH", "privilegesRequired": "HIGH", "confidentialityImpact": "HIGH"}, "impactScore": 6.0, "exploitabilityScore": 0.5}]}, "affected": [{"source": "secalert@redhat.com", "affectedData": [{"vendor": "Eclipse Foundation", "product": "BlueChi", "versions": [{"status": "affected", "version": "0", "lessThan": "1.0.0", "versionType": "semver"}], "packageName": "bluechi", "collectionURL": "https://github.com/eclipse-bluechi/bluechi", "defaultStatus": "unaffected"}]}], "published": "2025-12-24T17:15:47.293", "references": [{"url": "https://access.redhat.com/security/cve/CVE-2025-2515", "source": "secalert@redhat.com"}, {"url": "https://bugzilla.redhat.com/show_bug.cgi?id=2353313", "source": "secalert@redhat.com"}, {"url": "https://github.com/eclipse-bluechi/bluechi/commit/fe0d28301ce2bd45f0b1d8a98a94efef799fbc73#diff-64140c83db42a8888f346a40de293b80f79ebf7d75ce4137b22567e360bce607", "source": "secalert@redhat.com"}, {"url": "https://github.com/eclipse-bluechi/bluechi/issues/1069", "source": "secalert@redhat.com"}, {"url": "https://github.com/eclipse-bluechi/bluechi/pull/1073", "source": "secalert@redhat.com"}], "vulnStatus": "Deferred", "weaknesses": [{"type": "Secondary", "source": "secalert@redhat.com", "description": [{"lang": "en", "value": "CWE-863"}]}], "descriptions": [{"lang": "en", "value": "A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS. This flaw allows a user with root privileges on a managed node (qm) to create or override systemd service unit files that affect the host node. This issue can lead to privilege escalation, unauthorized service execution, and potential system compromise."}, {"lang": "es", "value": "Se encontr\u00f3 una vulnerabilidad en BlueChi, un controlador de servicios systemd multinodo utilizado en RHIVOS. Esta falla permite a un usuario con privilegios de root en un nodo gestionado (qm) crear o sobrescribir archivos de unidad de servicio systemd que afectan al nodo anfitri\u00f3n. Este problema puede llevar a una escalada de privilegios, ejecuci\u00f3n de servicios no autorizada y un posible compromiso del sistema."}], "lastModified": "2026-10-07T13:10:00.713", "sourceIdentifier": "secalert@redhat.com"}