Bluechi: privilege escalation in bluechi via unrestricted cross-node systemd dependencies
Vulnerability Description
A vulnerability was found in BlueChi, a multi-node systemd service controller used in RHIVOS. This flaw allows a user with root privileges on a managed node (qm) to create or override systemd service unit files that affect the host node. This issue can lead to privilege escalation, unauthorized service execution, and potential system compromise.
Impact Analysis
Refer to official advisory for detailed impact metrics.
Remediation
Ensure systems are updated to the latest vendor-supplied patch levels.
Am I Vulnerable?
Launch our assessment wizard to check if your infrastructure is exposed to • CVE-2025-2515
Credits & Attribution
The following person or organization is credited with identifying this vulnerability, as recorded in the NVD database:
- Red Hat would like to thank Thibault Guittet (RedHat) and Todd Cullum (RedHat) for reporting this issue.
References
- https://access.redhat.com/security/cve/CVE-2025-2515
- https://bugzilla.redhat.com/show_bug.cgi?id=2353313
- https://github.com/eclipse-bluechi/bluechi/commit/fe0d28301ce2bd45f0b1d8a98a94efef799fbc73#diff-64140c83db42a8888f346a40de293b80f79ebf7d75ce4137b22567e360bce607
- https://github.com/eclipse-bluechi/bluechi/issues/1069
- https://github.com/eclipse-bluechi/bluechi/pull/1073
More from Eclipse Foundation
View All →Affected Vendor
Eclipse Foundation
View all reports →