Skip to contentRed Hat Openshift Ai 3.3 vulnerabilities
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreData-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputyCVE-2026-186207.1 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreMl-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listenerCVE-2026-186187.5 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreData-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentialsCVE-2026-186117.5 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreOdh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterrolesCVE-2026-189828.8 High
- red hat openshift ai 3.3, openshift ai 3.4, openshift ai 3.5 +2 moreOdh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterroleCVE-2026-189518.8 High
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.3 +1 more +3 moreOdh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creationCVE-2026-189508.8 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +2 moreOdh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resourcesCVE-2026-189498.8 High
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.3 +1 more +3 moreFeast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry serverCVE-2026-18948Fix available9.9 Critical
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.3 +1 more +3 moreFeast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materializationCVE-2026-189478.5 High
- red hat openshift ai (rhoai), openshift ai 2.25, openshift ai 3.3 +1 more +3 moreFeast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authenticationCVE-2026-189417.7 High
- red hat ai inference server, openshift ai 2.25, openshift ai 3.3 +1 more +3 moreData-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardeningCVE-2026-186217.6 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreData-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator podCVE-2026-186178.8 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreData-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wideCVE-2026-186088.7 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +2 moreOdh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputyCVE-2026-164566.5 Medium
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreTrustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wideCVE-2026-155818.0 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +1 more +3 moreTrustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy overrideCVE-2026-154678.1 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +2 moreOdh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validationCVE-2026-167458.8 High
- xdg xdgmime, red hat cert manager support for red hat openshift release 1.17, cert manager support for red hat openshift release 1.18 +22 more +24 moreXdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.cCVE-2026-16118Fix available7.1 High
- red hat openshift ai 2.25, openshift ai 3.3, openshift ai 3.4 +2 moreGuardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)CVE-2026-153789.3 Critical
- redhat openshift ai, red hat openshift ai 2.25, openshift ai 3.3 +1 more +3 moreGuardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regexCVE-2026-151546.5 Medium
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +21 more +23 moreOpenssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionsCVE-2026-55655Fix available5.0 Medium
- openbsd openssh, redhat enterprise linux, red hat enterprise linux 10 +23 more +25 moreOpenssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of serviceCVE-2026-55653Fix available4.3 Medium
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: remote code execution via svc layer context handling with attacker-controlled framesCVE-2026-56211Fix available7.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idCVE-2026-56210Fix available7.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +11 more +13 moreLibaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackCVE-2026-56209Fix available7.1 High
- red hat ai inference server, ai inference server 3.2, ai inference server 3.3 +23 more +25 moreLibaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap modeCVE-2026-56208Fix available7.6 High
- huggingface huggingface/transformers, transformers, red hat openshift lightspeed +7 more +9 morePolicy Bypass in LightGlue Nested Config Resolution in huggingface/transformersCVE-2026-5241Fix available8.0 High
- aio-libs aiohttp, red hat exploit intelligence, lightspeed core +27 more +29 moreAIOHTTP Vulnerable to Deserialization of Untrusted DataCVE-2026-34993Fix available6.4 Medium
- jpadilla pyjwt, red hat openshift lightspeed, ai inference server +37 more +39 morePyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowedCVE-2026-48526Fix available7.4 High
- pip maintainers pip, red hat exploit intelligence, lightspeed core +34 more +36 morepip can extract console_scripts and gui_scripts outside installation directoryCVE-2026-8643Fix available4.1 Medium
- encode starlette, red hat exploit intelligence, openshift lightspeed +18 more +20 moreStarlette has missing Host header validation that poisons request.url.path, bypassing path-based security checksCVE-2026-48710In KEVPublic exploitFix availableEPSS 70.3%6.5 Medium
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +54 more +56 moreInvoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/sshCVE-2026-46595Public exploitFix available10.0 Critical
- golang crypto, golang.org/x/crypto golang.org/x/crypto/ssh, red hat assisted installer for red hat openshift container platform 2 +68 more +70 moreInvoking client can cause server deadlock on unexpected responses in golang.org/x/crypto/sshCVE-2026-39830Fix available9.1 Critical
- lfprojects mlflow, mlflow mlflow/mlflow, red hat openshift ai (rhoai) +2 more +4 moreArbitrary File Read via Prompt Tag Source Validation Bypass in mlflow/mlflowCVE-2026-2614Fix available7.5 High
- python urllib3, red hat exploit intelligence, external secrets operator for red hat openshift +48 more +50 moreurllib3: Decompression-bomb safeguards bypassed in parts of the streaming APICVE-2026-44432Fix available8.9 High
- kludex python-multipart, red hat exploit intelligence, openshift lightspeed +11 more +13 morePython-Multipart: Denial of Service via unbounded multipart part headersCVE-2026-42561Fix available7.5 High
- berriai litellm, red hat exploit intelligence, ansible automation platform 2 +5 more +7 moreLiteLLM: Authenticated command execution via MCP stdio test endpointsCVE-2026-42271In KEVPublic exploitFix availableEPSS 91.4%8.7 High
- protobufjs project protobufjs, protobufjs protobuf.js, red hat cryostat 4 +20 more +22 moreprotobufjs has an arbitrary code execution issueCVE-2026-41242Public exploitFix available9.4 Critical
- follow-redirects, red hat cluster observability operator 1.5.0, cryostat 4 +79 more +81 morefollow-redirects: Custom Authentication Headers Leaked to Cross-Domain Redirect TargetsCVE-2026-40895Fix available6.9 Medium
- python pillow, red hat lightspeed core, openshift lightspeed +27 more +29 morePillow is vulnerable to a FITS GZIP decompression bombCVE-2026-40192Fix available8.7 High
- keras, keras-team keras-team/keras, red hat openshift ai (rhoai) +3 more +5 moreSafe Mode Bypass in keras-team/kerasCVE-2026-1462Fix available8.8 High
- axios, red hat cryostat 4, gatekeeper 3 +63 more +65 moreAxios has Unrestricted Cloud Metadata Exfiltration via Header Injection ChainCVE-2026-40175Public exploitFix available4.8 Medium
- red hat openshift ai (rhoai), redhat openshift ai, red hat openshift ai 2.16 +3 more +5 moreOdh-dashboard: odh dashboard kubernetes service account exposureCVE-2026-54838.5 High
- berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +2 more +4 moreDuplicate Advisory: LiteLLM has a sandbox escape in custom-code guardrailCVE-2026-40217Public exploitFix availableEPSS 17.0%8.8 High
- axios, red hat cluster observability operator 1.5.0, cryostat 4 +60 more +62 moreAxios has a NO_PROXY Hostname Normalization Bypass that Leads to SSRFCVE-2025-62718Fix available6.3 Medium
- cryptography.io cryptography, red hat lightspeed core, migration toolkit for applications 8 +28 more +30 morecryptography has a buffer overflow if non-contiguous buffers were passed to APIsCVE-2026-39892Fix available6.9 Medium
- berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +3 more +5 moreLiteLLM has an authentication bypass via OIDC userinfo cache key collisionCVE-2026-35030Public exploitFix available9.4 Critical
- berriai litellm, red hat lightspeed core, ansible automation platform 2.6 +3 more +5 moreLiteLLM affected by privilege escalation via unrestricted proxy configuration endpointCVE-2026-35029Public exploitFix availableEPSS 38.6%8.7 High
- go-jose, red hat assisted installer for red hat openshift container platform 2, cert-manager operator for red hat openshift +110 more +112 moreGo JOSE affect by a panic in JWE decryptionCVE-2026-34986Fix available7.5 High
- lodash, lodash lodash-amd, lodash-es +105 more +107 morelodash vulnerable to Code Injection via `_.template` imports key namesCVE-2026-4800Public exploitFix available8.1 High
- Show moreLoading…