Local Root Escalation in IBM Licensing Operator Affects Security Files

CVE-2025-12985

What is CVE-2025-12985?

A vulnerability in the IBM Licensing Operator has been identified, where improper privilege assignments to critical security files can lead to local root escalation within containers. This flaw poses significant risks as it may allow unauthorized access to sensitive operational functions and data inside the affected containers, highlighting the importance of robust security measures and timely updates.

References