Skip to contentRed Hat Openshift Ai (rhoai) vulnerabilities
- rpm-software-management popt, red hat enterprise linux 10, enterprise linux 6 +7 more +9 morePopt-devel: popt-static: off-by-one in poptstuffargsCVE-2026-18739Fix available2.5 Low
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreBinutils: gnu binutils: heap-buffer-overflow in linker leads to information disclosure and denial of serviceCVE-2026-15003Fix available5.6 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.19 +29 more +31 moreGdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line bufferingCVE-2026-15588Fix available5.3 Medium
- xdg xdgmime, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +22 more +24 moreXdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.cCVE-2026-16118Fix available7.1 High
- feast feature server, red hat openshift ai (rhoai) +1 moreFeast: resource exhaustion via websocket endpointCVE-2026-235387.5 High
- red hat cost management on-premise 1, enterprise linux 10, enterprise linux 6 +7 more +9 moreLibarchive: heap overflow oob read while parsing a tar archive contains a pax extended headerCVE-2026-15028Fix available3.9 Low
- trustyai-explainability trustyai-service-operator, red hat openshift ai (rhoai) +1 moreTrustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabledCVE-2026-150636.3 Medium
- trustyai trustyai-service-operator, red hat openshift ai (rhoai) +1 moreTrustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apisCVE-2026-150446.3 Medium
- feast feature server, red hat openshift ai (rhoai) +1 moreFeast: unauthenticated arbitrary file writeCVE-2026-235379.1 Critical
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +4 more +6 moreRpm: heap buffer overflow in ndb slot table parsingCVE-2026-44605Fix available5.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +37 more +39 moreGlib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"CVE-2026-58016Fix available7.5 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +35 more +37 moreGlib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receiveCVE-2026-58015Fix available5.9 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +38 more +40 moreGlib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"CVE-2026-58014Fix available7.3 High
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"CVE-2026-58013Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()CVE-2026-58012Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetimeCVE-2026-58011Fix available6.5 Medium
- gnome glib, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +29 more +31 moreGlib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()CVE-2026-58010Fix available6.5 Medium
- fedoraproject sssd, red hat enterprise linux 10, enterprise linux 6 +8 more +10 moreSssd: use-after-free crash in sssd' 'sssd_pam' processCVE-2026-12610Fix available6.4 Medium
- red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18, cert manager support for red hat openshift release 1.20 +29 more +31 moreLibarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack()CVE-2026-14164Fix available7.5 High
- p11-kit project p11-kit, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +16 more +18 moreP11-kit: stack exhaustion via unbounded recursion in rpc attribute parsingCVE-2026-13757Fix available6.2 Medium
- fast-uri, red hat cluster observability operator 1.5.0, confidential compute attestation +49 more +51 morefast-uri vulnerable to host confusion via failed IDN canonicalizationCVE-2026-13676Fix available7.5 High
- kernel util-linux, red hat cost management on-premise 1, enterprise linux 10 +10 more +12 moreUtil-linux: util-linux: heap use-after-free in libblkid nested partition probingCVE-2026-13595Fix available6.8 Medium
- ffmpeg, red hat ai inference server, enterprise linux ai (rhel ai) 3 +6 more +8 moreFFmpeg - Out-of-Bounds Write in RASC Decoder decode_dlta()CVE-2026-58049Fix available8.8 High
- lepture mistune, red hat migration toolkit for applications 8, openshift ai (rhoai) +3 more +5 moreMistune: Potential DoS via quadratic-time parsing in parse_link_textCVE-2026-49851Fix available8.7 High
- feast-dev feast, red hat openshift ai (rhoai), openshift ai 3.4 +2 moreFeast < 0.63.0 Unauthenticated RCE via ApplyFeatureView gRPC DeserializationCVE-2026-56121Public exploitFix available9.3 Critical
- fasterxml jackson-databind, red hat cryostat 4 on rhel 9, openshift developer tools and services +44 more +46 morejackson-databind: Array subtype allowlist bypass in BasicPolymorphicTypeValidator (allowIfSubTypeIsArray)CVE-2026-54513Fix available8.1 High
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreBerriAI litellm MCP Proxy user_api_key_auth_mcp.py UserAPIKeyAuth improper authenticationCVE-2026-12773Fix available6.9 Medium
- quarkus, red hat cryostat 4 on rhel 9, openshift serverless +15 more +17 moreAuthentication/Authorization Bypass via Advanced Path Normalization VulnerabilitiesCVE-2026-50559Fix available7.5 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesCVE-2026-56211Fix available7.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idCVE-2026-56210Fix available7.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackCVE-2026-56209Fix available7.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreLibaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modeCVE-2026-56208Fix available7.6 High
- red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +1 moreFfmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move()CVE-2026-12706Fix available6.5 Medium
- jupyter server, jupyter-server jupyter server, red hat migration toolkit for applications 8.2 +2 more +4 moreJupyter Server: Stored XSS in `NbconvertFileHandler` / `NbconvertPostHandler` via missing `sandbox` CSPCVE-2026-44727Fix available9.3 Critical
- ffmpeg, red hat ai inference server, enterprise linux ai (rhel ai) 3 +2 more +4 moreHeap out-of-bounds write via odd slice_height in FFmpeg MagicYUV decoderCVE-2026-8461Public exploitFix available8.8 High
- nodejs undici, red hat cluster observability operator 1.5.0, cryostat 4 +25 more +27 moreundici WebSocket client vulnerable to denial of service via fragment count bypassCVE-2026-12151Fix available7.5 High
- vllm-project vllm, red hat ai inference server, enterprise linux ai (rhel ai) 3 +1 more +3 moreVllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectationsCVE-2026-12491Fix available4.8 Medium
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +1 more +3 moreLiteLLM: Authentication Bypass via Host Header InjectionCVE-2026-49468Public exploitFix available9.5 Critical
- vllm, red hat exploit intelligence, openshift lightspeed +12 more +14 morevLLM: OpenAI auth bypassCVE-2026-48746Fix available9.1 Critical
- vllm, red hat ai inference server, ai inference server 3.2 +5 more +7 morevLLM: Security Check Bypass via assert Statement in Activation Function Loading Allows Arbitrary Code ExecutionCVE-2026-41523Fix available7.5 High
- nltk, red hat exploit intelligence, openshift lightspeed +4 more +6 moreNLTK: URL-Encoded Path Traversal in nltk.data.load() Allows Arbitrary Local File ReadCVE-2026-54293Fix available7.5 High
- encode starlette, red hat exploit intelligence, migration toolkit for applications 8 +8 more +10 moreStarlette: SSRF and NTLM credential theft via UNC paths in StaticFiles on WindowsCVE-2026-48818Fix available7.5 High
- websockets ws, red hat cluster observability operator 1.5.0, cryostat 4 +46 more +48 morews: Memory exhaustion DoS from tiny fragments and data chunksCVE-2026-48779Fix available7.5 High
- form-data, red hat cluster observability operator 1.5.0, cryostat 4 +77 more +79 moreform-data does not escape CR/LF/quote in multipart field names and filenames (CRLF injection)CVE-2026-12143Fix available8.7 High
- chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 moreChromaDB has a code injection vulnerabilityCVE-2026-45833Public exploit9.4 Critical
- chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 moreAll V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and...CVE-2026-458328.8 High
- chroma chromadb, red hat enterprise linux ai (rhel ai) 3, openshift ai (rhoai) +2 moreChromaDB allows any authenticated users to arbitrarily read, write, update, or delete data in any tenant's collectionCVE-2026-458308.8 High
- keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +1 more +3 morePath Traversal in keras-team/kerasCVE-2026-11816Fix available8.1 High
- red hat enterprise linux 10, enterprise linux 6, enterprise linux 7 +6 more +8 moreKrb5: krb5: integer underflow in berval2tl_data() leads to heap out-of-bounds readCVE-2026-11850Fix available5.0 Medium
- vllm, vllm-project vllm-project/vllm, red hat ai inference server +2 more +4 moreUnbounded Frame Count in video/jpeg Base64 Data URL Processing Leads to OOM DoS in vllm-project/vllmCVE-2026-5497Fix available7.5 High
- Show moreLoading…