Skip to content
OpenAdvisories
High · 7.2 CVE-2025-2515 EUVD-2025-205290GHSA-hcr2-46j7-rjhp

Bluechi: privilege escalation in bluechi via unrestricted cross-node systemd dependencies

Published Dec 24, 2025 · Updated Jun 29, 2026 · Assigned by redhat

Description

A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS. This flaw allows a user with root privileges on a managed node (qm) to create or override systemd service unit files that affect the host node. This issue can lead to privilege escalation, unauthorized service execution, and potential system compromise.

Affected products

VendorProductAffectedFixed
Eclipse Foundation BlueChi < 1.0.0 1.0.0

References