Openshift Ai (Redhat) - vulnerabilities (CVEs)

369 CVEs, 5 in the last 30 days, 24 known versions, newest CVE from 2026-10-28. Vendor: Redhat.

CVEs of Openshift Ai

CVE-2026-117574 - CVSS 9.1 (critical), 2026-10-28: A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another…
CVE-2026-13451 - CVSS 7.7 (high), 2026-10-28: A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by…
CVE-2026-114236 - CVSS 3.3 (low), 2026-10-21: storage/pkg/archive.ApplyLayer and ApplyUncompressedLayer may, when processing corrupt or malicious inputs, leak a file descriptor; unbounded repeated calls…
CVE-2026-17557 - CVSS 6.5 (medium), 2026-10-21: A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this…
CVE-2026-108334 - CVSS 7.4 (high), 2026-10-15: A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether…
CVE-2026-87743 - CVSS 7.5 (high), 2026-09-18: A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths are normalized between the security matcher and…
CVE-2026-92091 - CVSS 5.9 (medium), 2026-09-16: A flaw was found in jwcrypto. The JWK.import_key() function validates the key_ops JWK member for duplicate values using an algorithm with O(n^2) time…
CVE-2026-86332 - CVSS 6.5 (medium), 2026-09-07: A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the…
CVE-2026-84185 - CVSS 5.9 (medium), 2026-09-03: A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE) standards. The issue occurs when the…
CVE-2026-18393 - CVSS 5.4 (medium), 2026-08-28: A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A…
CVE-2026-80179 - CVSS 5.9 (medium), 2026-08-27: A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This…
CVE-2026-15218 - CVSS 7.9 (high), 2026-08-17: A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions…
CVE-2026-18620 - CVSS 7.1 (high), 2026-08-10: A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount…
CVE-2026-18618 - CVSS 7.5 (high), 2026-08-10: A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service (DoS)…
CVE-2026-18611 - CVSS 7.5 (high), 2026-08-10: A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as…
CVE-2026-18982 - CVSS 8.8 (high), 2026-08-10: A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in any Kubernetes namespace to escalate…
CVE-2026-18951 - CVSS 8.8 (high), 2026-08-10: A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management…
CVE-2026-18950 - CVSS 8.8 (high), 2026-08-10: A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does…
CVE-2026-18949 - CVSS 8.8 (high), 2026-08-10: A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly…
CVE-2026-18948 - CVSS 9.9 (critical), 2026-08-10: A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill'…
CVE-2026-18947 - CVSS 8.5 (high), 2026-08-10: A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially…
CVE-2026-18942 - CVSS 5.5 (medium), 2026-08-10: A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an…
CVE-2026-18941 - CVSS 7.7 (high), 2026-08-10: A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security…
CVE-2026-18621 - CVSS 7.6 (high), 2026-08-10: A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo…
CVE-2026-18617 - CVSS 8.8 (high), 2026-08-10: A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the spec.database.customExtraParams field,…
CVE-2026-18608 - CVSS 8.7 (high), 2026-08-10: A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges…
CVE-2026-16456 - CVSS 6.5 (medium), 2026-08-10: A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the…
CVE-2026-15581 - CVSS 8 (high), 2026-08-10: A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly…
CVE-2026-15467 - CVSS 8.1 (high), 2026-08-10: A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by…
CVE-2026-14450 - CVSS 9.9 (critical), 2026-08-10: A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy gateway by forging HTTP headers,…
CVE-2026-13717 - CVSS 8.8 (high), 2026-08-10: A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user…
CVE-2026-16745 - CVSS 8.8 (high), 2026-07-23: A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI). Due to incorrect network binding, a malicious actor within the…
CVE-2026-15588 - CVSS 5.3 (medium), 2026-07-20: A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to…
CVE-2026-16118 - CVSS 7.1 (high), 2026-07-17: A flaw was found in xdgmime. A heap-based buffer overflow can be triggered in _xdg_mime_magic_parse_magic_line() in the xdgmimemagic.c file on little-endian…
CVE-2026-23538 - CVSS 7.5 (high), 2026-07-16: A vulnerability was identified in the Feast Feature Server's `/ws/chat` endpoint that allows remote attackers to establish persistent WebSocket connections…
CVE-2026-15574 - CVSS 7.5 (high), 2026-07-13: A flaw was found in the vllm-orchestrator-gateway component. The system's production binary logs all incoming authorization headers and full chat payloads,…
CVE-2026-15143 - CVSS 9.3 (critical), 2026-07-10: A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema…
CVE-2026-15378 - CVSS 9.3 (critical), 2026-07-10: A flaw was found in the `guardrails-detectors` component. This vulnerability allows a remote attacker to perform a blind Server-Side Request Forgery (SSRF) by…
CVE-2026-15154 - CVSS 6.5 (medium), 2026-07-08: A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS),…
CVE-2026-15063 - CVSS 6.3 (medium), 2026-07-08: A flaw was found in the gorch service template, which is part of the trustyai-service-operator. Even when authentication is enabled, the gorch service exposes…
CVE-2026-15044 - CVSS 6.3 (medium), 2026-07-08: A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security setting is not enabled, these…
CVE-2026-23537 - CVSS 9.1 (critical), 2026-07-01: A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an unauthenticated remote attacker to write arbitrary…
CVE-2026-58015 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. The D-Bus client-side implementation of the DBUS_COOKIE_SHA1 SASL authentication mechanism does not validate the cookie_context…
CVE-2026-58016 - CVSS 9.1 (critical), 2026-06-30: A flaw was found in GLib. A state confusion issue exists in g_dbus_node_info_new_for_xml() in the gio/gdbusintrospection.c file when processing malformed…
CVE-2026-58014 - CVSS 8.6 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the g_key_file_get_locale_string_list function in the gkeyfile.c file when loading a key file with…
CVE-2026-58013 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in g_io_channel_read_line_backend() in the giochannel.c file when a custom line terminator with a…
CVE-2026-58012 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. A buffer over-read can occur in the g_regex_replace function when used with the `G_REGEX_RAW` compile flag and case-change…
CVE-2026-58011 - CVSS 7.5 (high), 2026-06-30: A flaw was found in GLib. An out-of-bounds read of only 2 bytes can occur in the g_date_time_get_ymd function in the glib/gdatetime.c file when an invalid…
CVE-2026-58010 - CVSS 8.2 (high), 2026-06-30: A flaw was found in GLib. An off-by-one error can occur in the gvs_tuple_is_normal function in the glib/gvariant-serialiser.c file when doing an alignment…
CVE-2026-14164 - CVSS 7.5 (high), 2026-06-30: A double free issue has been identified in libarchive's RAR5 reader. During parsing of a specially crafted RAR5 archive, the filtered_buf pointer may remain…
CVE-2026-12912 - CVSS 7.3 (high), 2026-06-29: A flaw was found in libtiff. A remote attacker could exploit this vulnerability by providing a specially crafted PixarLog-compressed TIFF image. This issue…
CVE-2026-13676 - CVSS 7.5 (high), 2026-06-29: fast-uri versions 2.3.1 through 3.1.2 and 4.0.0 fail to canonicalize Unicode (IDN) hostnames for HTTP-family URLs. The IDN conversion path calls a helper that…
CVE-2026-58049 - CVSS 8.8 (high), 2026-06-28: FFmpeg's RASC video decoder (decode_dlta in libavcodec/rasc.c) performs 32-bit reads and writes at the row cursor before the NEXT_LINE row-boundary check and…
CVE-2026-44017 - CVSS 8.3 (high), 2026-06-24: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. Prior to 2.91.0, the EasyOCR…
CVE-2026-44020 - CVSS 9.4 (critical), 2026-06-24: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. From 2.13.0 until 2.74.0, the…
CVE-2026-44016 - CVSS 8.2 (high), 2026-06-24: Docling simplifies document processing by parsing diverse formats and providing integrations with the generative AI ecosystem. FIn versions >= 2.82.0, <…
CVE-2026-49851 - CVSS 8.7 (high), 2026-06-24: Mistune is a Python Markdown parser with renderers and plugins. Prior to 3.3.0, Mistune is vulnerable to a CPU exhaustion DoS due to superlinear…
CVE-2026-56121 - CVSS 9.8 (critical), 2026-06-24: Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by…
CVE-2026-54513 - CVSS 8.1 (high), 2026-06-23: jackson-databind contains the general-purpose data-binding functionality and tree-model for Jackson Data Processor. From 2.10.0 until 2.18.8, 2.21.4, and…
CVE-2023-54365 - CVSS 8.7 (high), 2026-06-23: Traefik before 2.10.5 and 3.0.0-beta4 is affected by a denial-of-service vulnerability in HTTP/2 request handling inherited from the Go standard library's…
CVE-2026-55655 - CVSS 6.1 (medium), 2026-06-23: A flaw was found in OpenSSH. A local unprivileged attacker on a Linux client host can hijack client-side X11 forwarding connections. This is possible by…
CVE-2026-55653 - CVSS 6.5 (medium), 2026-06-23: A flaw was found in OpenSSH. A malicious SSH server can exploit a double free vulnerability in the Diffie-Hellman Group Exchange (DH-GEX) client path. This…
CVE-2026-41523 - CVSS 7.5 (high), 2026-06-22: vLLM is an inference and serving engine for large language models (LLMs). Prior to 0.22.0, an assert-based security check in vLLM's activation function…
CVE-2026-48746 - CVSS 9.1 (critical), 2026-06-22: vLLM is an inference and serving engine for large language models (LLMs). From 0.3.0 until 0.22.0, a vulnerability in ASGI web servers and starlette's trust…
CVE-2026-49468 - CVSS 9.8 (critical), 2026-06-22: LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. Prior to 1.84.0, a Host-header parsing flaw in the LiteLLM proxy could,…
CVE-2026-44727 - CVSS 9.3 (critical), 2026-06-22: Jupyter Server is the backend for Jupyter web applications. Prior to 2.20, the nbconvert HTTP handlers in jupyter_server render user-authored notebook HTML…
CVE-2026-54293 - CVSS 7.5 (high), 2026-06-22: NLTK (Natural Language Toolkit) is a suite of open source Python modules, data sets, and tutorials supporting research and development in Natural Language…
CVE-2026-12773 - CVSS 9.8 (critical), 2026-06-21: A weakness has been identified in BerriAI litellm up to 1.59.8. Affected is the function UserAPIKeyAuth of the file…
CVE-2026-56340 - CVSS 8.8 (high), 2026-06-20: vLLM versions >= 0.10.2 and < 0.13.0 are missing sparse tensor validation in multimodal embeddings processing. Because PyTorch disables sparse tensor…
CVE-2026-50559 - CVSS 7.5 (high), 2026-06-19: Quarkus is a Java framework for building cloud-native applications. Prior to versions 3.37.0, 3.36.3, 3.33.2.1, 3.33.3, 3.27.4.1, 3.27.5, and 3.20.6.2,…
CVE-2026-56211 - CVSS 7.1 (high), 2026-06-19: A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC…
CVE-2026-56210 - CVSS 7.1 (high), 2026-06-19: A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video…
CVE-2026-56209 - CVSS 7.1 (high), 2026-06-19: An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video…
CVE-2026-56208 - CVSS 7.6 (high), 2026-06-19: A heap buffer overflow vulnerability was found in libaom, the reference AV1 codec implementation. A flaw in the AV1 encoder's Look-Ahead Processing (LAP) mode…
CVE-2026-12706 - CVSS 6.5 (medium), 2026-06-19: A use-after-free vulnerability was found in FFmpeg's RASC video decoder. The decode_move() function initializes a read pointer into a decompressed buffer, but…
CVE-2026-8461 - CVSS 8.8 (high), 2026-06-18: An out-of-bounds write vulnerability in FFmpeg's libavcodec library, specifically in the MagicYUV decoder, allows denial-of-service and, in some cases, can be…
CVE-2026-48818 - CVSS 7.5 (high), 2026-06-17: Starlette is a lightweight ASGI framework/toolkit. In versions 1.0.1 and earlier, StaticFiles on Windows is vulnerable to SSRF. An UNC path such as…
CVE-2026-9697 - CVSS 7.4 (high), 2026-06-17: Impact: undici's ProxyAgent silently drops the requestTls option when configured with a SOCKS5 proxy URI (socks5:// or socks://). The target HTTPS connection…
CVE-2026-6734 - CVSS 8.8 (high), 2026-06-17: Impact: When using Socks5ProxyAgent, undici reuses a single connection pool across different origins without verifying that the pool's origin matches the…
CVE-2026-12151 - CVSS 7.5 (high), 2026-06-17: Impact: The undici WebSocket client enforces maxPayloadSize on the cumulative byte count of fragments in a message but does not enforce a limit on the number…
CVE-2026-12491 - CVSS 4.8 (medium), 2026-06-17: A flaw was found in vLLM, an open-source library for large language model inference. This vulnerability arises from improper handling of image metadata,…
CVE-2026-48779 - CVSS 7.5 (high), 2026-06-16: ws is an open source WebSocket client and server for Node.js. All versions from 1.1.0 up to (but not including) 5.2.5, from 6.0.0 up to 6.2.4, from 7.0.0 up…
CVE-2026-42014 - CVSS 6.6 (medium), 2026-06-16: A flaw was found in GnuTLS. The `gnutls_pkcs11_token_set_pin` function, used for changing the Security Officer PIN, can lead to a use-after-free…
CVE-2026-44990 - CVSS 9.3 (critical), 2026-06-12: ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer with a clear API. Under the default…
CVE-2026-12143 - CVSS 8.7 (high), 2026-06-12: form-data is a library for creating readable multipart/form-data streams. In versions through 4.0.5, the `field` argument to `FormData#append` and the…
CVE-2026-50010 - CVSS 7.5 (high), 2026-06-12: Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final,…
CVE-2026-47691 - CVSS 10 (critical), 2026-06-12: Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's…
CVE-2026-48059 - CVSS 8.7 (high), 2026-06-12: Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, the HAProxy PROXY…
CVE-2026-48043 - CVSS 7.5 (high), 2026-06-12: Netty is a network application framework for development of protocol servers and clients. In netty-codec-http2 prior to versions 4.1.135.Final and…
CVE-2026-45833 - CVSS 9.4 (critical), 2026-06-12: A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated attacker to run arbitrary code on the server…
CVE-2026-45832 - CVSS 8.8 (high), 2026-06-12: All V1 collection-level endpoints in ChromaDB's Python project pass None for the tenant and database to the authorization layer, allowing attackers to bypass…
CVE-2026-45830 - CVSS 8.8 (high), 2026-06-12: A lack of authorization validation in version 0.4.17 or later of the ChromaDB Python project allows any authenticated users to arbitrarily read, write,…
CVE-2026-45674 - CVSS 10 (critical), 2026-06-12: Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final, Netty's…
CVE-2026-45416 - CVSS 7.5 (high), 2026-06-12: Netty is a network application framework for development of protocol servers and clients. Prior to versions 4.1.135.Final and 4.2.15.Final,…
CVE-2026-44893 - CVSS 7.5 (high), 2026-06-12: Netty is a network application framework for development of protocol servers and clients. In netty-codec-haproxy prior to versions 4.1.135.Final and…
CVE-2026-44249 - CVSS 8.1 (high), 2026-06-11: Netty is a network application framework for development of protocol servers and clients. In netty-handler prior to versions 4.1.135.Final and 4.2.15.Final,…
CVE-2026-44494 - CVSS 8.7 (high), 2026-06-11: Axios is a promise based HTTP client for the browser and Node.js. From 1.0.0 to before 1.16.0, the Axios library is vulnerable to a Prototype Pollution…
CVE-2026-44492 - CVSS 8.6 (high), 2026-06-11: Axios is a promise based HTTP client for the browser and Node.js. Prior to 0.32.0 and 1.16.0, Axios does not normalise IPv4-mapped IPv6 addresses. When…
CVE-2026-44496 - CVSS 7.5 (high), 2026-06-11: Axios is a promise based HTTP client for the browser and Node.js. Axios versions before 0.32.0 on the 0.x line and before 1.16.0 on the 1.x line build a…
CVE-2026-44495 - CVSS 7.7 (high), 2026-06-11: Axios is a promise based HTTP client for the browser and Node.js. From 0.19.0 to before 0.31.1 and 1.15.2, Axios contains prototype-pollution gadgets in…