IP-DB.com
Türkçe English Deutsch Español
Log In Get API Key

openshift ai vulnerabilities (CVE)

CVE records published for openshift ai, newest first. Follow to get an email when a new one appears.

2.25 1383.4 1273.3 863.5 283.0 233.2 182.16 132.19 22.21 22.22 22.24 22.14 1
238 results
6.8Medium
CVE-2026-114406

Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 6 Extended Lifecycle Support - EXTENSION; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support

The system certificate authority (CA) store in Red Hat products, distributed via ca-certificates RPM packages, included multiple root CA certificates of authorities, which signed intermediate CA certificates with weak private keys issued by the eMudhra certif…

7.8High
CVE-2026-96889

Librsvg: use-after-free when xml includes have duplicated entities

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in librsvg. When processing an SVG document containing nested XML inclusions (Xincludes) with duplicate entity declarations, a use-after-free error can occur. This vulnerability arises because the library incorrectly frees an XML entity that …

7.8High
CVE-2026-96512

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in sudo. When sudoers rules use NOTBEFORE or NOTAFTER time-based access restrictions with timestamps that omit the trailing 'Z' timezone indicator, the time evaluation relies on the TZ environment variable inherited from the calling user. Bec…

8.5High
CVE-2026-74860

Libxml2: double-free/uaf in libxml2 python bindings

Red Hat Red Hat Enterprise Linux 10; Red Hat Red Hat Enterprise Linux 10.0 Extended Update Support; Red Hat Red Hat Enterprise Linux 7 Extended Lifecycle Support; Red Hat Red Hat Enterprise Linux 8

A flaw was found in libxml2 with Python bindings enabled. A remote attacker could exploit this vulnerability by providing a specially crafted XML document containing a Document Type Definition (DTD) with enumerated attribute values. This triggers a double-fre…

7.9High
CVE-2026-15218

Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation

maas-api; maas-controller; Red Hat Red Hat OpenShift AI 3.4

A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identity of these ServiceA…

7.1High
CVE-2026-18620

Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI 3.5

A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged ServiceAccount (SA) during a CreateRun request, an attacker…

7.5High
CVE-2026-18618

Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI 3.5

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service (DoS) issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities…

7.5High
CVE-2026-18611

Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI 3.5

A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Ser…

8.8High
CVE-2026-18982

Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI 3.5

A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in any Kubernetes namespace to escalate their privileges. Through the creation of training jobs, an attacker can impersonate service accounts, …

8.8High
CVE-2026-18951

Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole

Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI 3.5

A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` per…

8.8High
CVE-2026-18950

Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI (RHOAI)

A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the `roleRef` field, allowing a user to specify an arbitrary role, including h…

8.8High
CVE-2026-18949

Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4

A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-…

9.9Critical
CVE-2026-18948

Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI (RHOAI)

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary cod…

1.1%EPSS
8.5High
CVE-2026-18947

Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI (RHOAI)

A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially crafted request that omits the feature_views field, an attacker can bypass intended permission checks. T…

5.5Medium
CVE-2026-18942

Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI (RHOAI)

A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an automated process with elevated privileges, allowing the tenant to steal sensitive credentials. This could …

7.7High
CVE-2026-18941

Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI (RHOAI)

A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. This default allows unauthenticated and unauthorized access to feature-server, regist…

7.6High
CVE-2026-18621

Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat AI Inference Server

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, a…

8.8High
CVE-2026-18617

Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI 3.5

A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the spec.database.customExtraParams field, which allows for the injection of dangerous parameters into the MySQL Data Source Name (DSN) string. B…

8.7High
CVE-2026-18608

Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI 3.5

A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute co…

6.5Medium
CVE-2026-16456

Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4

A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the `loadSecret` function. This function improperly reads the Secret namespace from user-controlled input without …

8.0High
CVE-2026-15581

Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI 3.5

A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. An attacker can exploit this to read, tamper with, or delete monitoring data …

8.1High
CVE-2026-15467

Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override

Red Hat Red Hat OpenShift AI 2.25; Red Hat Red Hat OpenShift AI 3.3; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI 3.5

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execu…

8.8High
CVE-2026-13717

Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)

llm-d; Red Hat Red Hat OpenShift AI 3.4; Red Hat Red Hat OpenShift AI (RHOAI)

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive i…