Description
A flaw was found in Eclipse Che che-machine-exec. This vulnerability allows unauthenticated remote arbitrary command execution and secret exfiltration (SSH keys, tokens, etc.) from other users' Developer Workspace containers, via an unauthenticated JSON-RPC / websocket API exposed on TCP port 3333.
Affected products
| Vendor | Product | Affected | Fixed |
|---|---|---|---|
| Red Hat | Red Hat OpenShift Dev Spaces (RHOSDS) 3.22 | — | — |
| Red Hat | Red Hat OpenShift Dev Spaces (RHOSDS) 3.23 | — | — |
| Red Hat | Red Hat OpenShift Dev Spaces (RHOSDS) 3.24 | — | — |
Public exploits
Exploit or proof-of-concept code for this vulnerability is publicly available, which lowers the bar for attackers. Treat it as a reason to patch sooner.
Third-party code, not reviewed by us. Public PoCs are sometimes fake or contain malware. Read the code first and run it only in an isolated lab, against systems you are authorised to test.
Metasploit 1 module
-
Eclipse Che machine-exec Unauthenticated RCE
exploit/linux/http/eclipse_che_machine_exec_rce
Sources: PoC-in-GitHub, Metasploit Framework, Exploit-DB — updated daily. Only links are listed; no exploit code is hosted here.
Advisories 1
- WID-SEC-2025-2725 Red Hat OpenShift Dev Spaces: Schwachstelle ermöglicht Codeausführung BSI CERT-Bund (WID) · Dec 2, 2025
References
- RHSA-2025:22620 vendor-advisory
- RHSA-2025:22623 vendor-advisory
- RHSA-2025:22652 vendor-advisory
- https://access.redhat.com/security/cve/CVE-2025-12548 vdb-entry
- RHBZ#2408850 issue-tracking