CVE-2025-12985

IBM Licensing Operator incorrectly assigns privileges to security critical files which could allow a local root escalation inside a container running the IBM Licensing Operator image.

Score

CVSS 3.1 8.4 High

Status

Deferred - psirt@us.ibm.com

Published

2026-01-20

Last modified

2026-01-20

Weaknesses

CWE-732

Affected products

• License Metric Tool (Ibm)

References

• https://www.ibm.com/support/pages/license-service-privilege-escalation-vulnerability