Red Hat Red Hat OpenShift AI 2.25
25 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-86332 | fixed in 1791853525 | Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-18620 | fixed in 1785189934 | Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy | HIGH 7.1 | 0.5 % | ||
| CVE-2026-18618 | fixed in 1785260280 | Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener | HIGH 7.5 | 0.8 % | ||
| CVE-2026-18611 | fixed in 1785189332 | Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials | HIGH 7.5 | 0.6 % | ||
| CVE-2026-18982 | fixed in 1785187053 | Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles | HIGH 8.8 | 0.8 % | ||
| CVE-2026-18950 | fixed in 1785940823 | Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation | HIGH 8.8 | 0.5 % | ||
| CVE-2026-18949 | fixed in 1785940823 | Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources | HIGH 8.8 | 0.7 % | ||
| CVE-2026-18948 | fixed in 1786110051 | Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server | CRITICAL 9.9 | 1.1 % | ||
| CVE-2026-18947 | fixed in 1786110051 | Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization | HIGH 8.5 | 0.6 % | ||
| CVE-2026-18942 | fixed in 1786110051 | Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation | MEDIUM 5.5 | 0.4 % | ||
| CVE-2026-18941 | fixed in 1786110051 | Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication | HIGH 7.7 | 0.9 % | ||
| CVE-2026-18621 | fixed in 1785189934 | Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening | HIGH 7.6 | 0.5 % | ||
| CVE-2026-18617 | fixed in 1785189332 | Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from op… | HIGH 8.8 | 0.7 % | ||
| CVE-2026-18608 | fixed in 1785189332 | Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide | HIGH 8.7 | 0.7 % | ||
| CVE-2026-16456 | fixed in 1785187158 | Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-15581 | fixed in 1785187119 | Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api… | HIGH 8.0 | 0.4 % | ||
| CVE-2026-15467 | fixed in 1785187119 | Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allow… | HIGH 8.1 | 0.6 % | ||
| CVE-2026-16745 | fixed in 1785940823 | Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation | HIGH 8.8 | 0.5 % | ||
| CVE-2026-15574 | fixed in 1790929477 | Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default | HIGH 7.5 | 0.5 % | ||
| CVE-2026-15143 | fixed in 1791364320 | Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) | CRITICAL 9.3 | 0.5 % | ||
| CVE-2026-15378 | fixed in 1786710963 | Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) | CRITICAL 9.3 | 0.5 % | ||
| CVE-2026-15154 | fixed in 1784230964 | Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-5483 | fixed in 1775234711 | Odh-dashboard: odh dashboard kubernetes service account exposure | CRITICAL 9.9 | 0.5 % | ||
| CVE-2025-12805 | | Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy | HIGH 8.1 | 0.4 % | ||
| CVE-2025-12103 | fixed in 1776243252 | Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace | MEDIUM 5.0 | 0.3 % |