CVE-2025-69872
Fixed in a distro release EPSS <1%CVSS 9.8
DiskCache (python-diskcache) through 5.6.3 uses Python pickle for serialization by default. An attacker with write access to the cache directory can achieve arbitrary code execution when a victim application reads from the cache.
Products: Red Hat OpenShift AI 3.3, Red Hat Satellite 6.18, Red Hat AI Inference Server, Red Hat Enterprise Linux AI (RHEL AI) 3, Red Hat OpenShift AI (RHOAI)
Fixed upstream
| Ecosystem | Package | Fixed in |
|---|---|---|
| PyPI | diskcache | no fix |
Distro releases
| Release | Package | Fixed in |
|---|---|---|
| Chainguard | kserve-huggingfaceserver-cuda-13.3 | no fix |
| Chainguard | lmcache-cuda-12.8 | no fix |
| Chainguard | nemo | 2.7.3-r0 |
| Chainguard | nemo-rl-cuda-13.0-sglang | no fix |
| Chainguard | nemo-rl-cuda-13.0-vllm | no fix |
| Chainguard | nemo-skills | 0.7.0_git20260911-r1 |
| Chainguard | py3.10-diskcache | no fix |
| Chainguard | py3.10-vllm-cuda-12.4 | no fix |
| Chainguard | py3.10-vllm-cuda-12.9 | no fix |
| Chainguard | py3.10-vllm-cuda-13.0 | no fix |
| Chainguard | py3.11-diskcache | no fix |
| Chainguard | py3.11-text-generation-inference | no fix |
| Chainguard | py3.12-diskcache | no fix |
| Chainguard | py3.12-vllm-cuda-12.4 | no fix |
| Chainguard | py3.12-vllm-cuda-12.9 | no fix |
| Chainguard | py3.12-vllm-cuda-13.0 | no fix |
| Chainguard | py3.13-diskcache | no fix |
| Chainguard | py3.13-vllm-cuda-12.9 | no fix |
| Chainguard | py3.13-vllm-cuda-13.0 | no fix |
| Chainguard | text-generation-inference | no fix |
| Chainguard | tritonserver-backend-vllm-cuda-12.9 | no fix |
| Chainguard | tritonserver-backend-vllm-cuda-13.0 | 25.11-r13 |
| Chainguard | vllm-cuda-13.2 | 0.26.0-r0 |
| Chainguard | vllm-openai-cuda-12.9 | 0.28.0-r0 |
| Chainguard | vllm-openai-cuda-12.9-nvidia-cusparse | no fix |
| Chainguard | vllm-openai-cuda-13.0 | 0.26.0-r0 |
| Debian 12 | diskcache | no fix |
| Debian 13 | diskcache | no fix |
| Debian 14 | diskcache | no fix |
| Ubuntu 22.04 LTS | diskcache | no fix |
| Ubuntu 24.04 LTS | diskcache | no fix |
| Ubuntu 25.10 | diskcache | no fix |
| Ubuntu 26.04 LTS | diskcache | no fix |
| Ubuntu 26.10 | diskcache | no fix |