Red Hat Red Hat OpenShift AI 3.4
54 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114406 | | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-96512 | | Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization | HIGH 7.8 | 0.3 % | ||
| CVE-2026-74860 | | Libxml2: double-free/uaf in libxml2 python bindings | HIGH 8.5 | 0.7 % | ||
| CVE-2026-15218 | fixed in 1787153683 | Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege esca… | HIGH 7.9 | 0.7 % | ||
| CVE-2026-18620 | fixed in 1784924951 | Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy | HIGH 7.1 | 0.5 % | ||
| CVE-2026-18618 | fixed in 1785269945 | Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener | HIGH 7.5 | 0.8 % | ||
| CVE-2026-18611 | fixed in 1784833428 | Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials | HIGH 7.5 | 0.6 % | ||
| CVE-2026-18982 | fixed in 1784814352 | Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles | HIGH 8.8 | 0.8 % | ||
| CVE-2026-18951 | fixed in 1784814352 | Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole | HIGH 8.8 | 0.9 % | ||
| CVE-2026-18950 | fixed in 1786109665 | Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation | HIGH 8.8 | 0.5 % | ||
| CVE-2026-18949 | fixed in 1786109665 | Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources | HIGH 8.8 | 0.7 % | ||
| CVE-2026-18948 | fixed in 1786107278 | Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server | CRITICAL 9.9 | 1.1 % | ||
| CVE-2026-18947 | fixed in 1791863220 | Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization | HIGH 8.5 | 0.6 % | ||
| CVE-2026-18942 | fixed in 1786107278 | Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation | MEDIUM 5.5 | 0.4 % | ||
| CVE-2026-18941 | fixed in 1786107278 | Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication | HIGH 7.7 | 0.9 % | ||
| CVE-2026-18621 | fixed in 1784924951 | Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening | HIGH 7.6 | 0.5 % | ||
| CVE-2026-18617 | fixed in 1784833428 | Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from op… | HIGH 8.8 | 0.7 % | ||
| CVE-2026-18608 | fixed in 1784833428 | Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide | HIGH 8.7 | 0.7 % | ||
| CVE-2026-16456 | fixed in 1784950479 | Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-15581 | fixed in 1784993206 | Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api… | HIGH 8.0 | 0.4 % | ||
| CVE-2026-15467 | fixed in 1784993206 | Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allow… | HIGH 8.1 | 0.6 % | ||
| CVE-2026-14450 | fixed in 1785850409 | Maas-billing: maas api: privilege escalation via forged http headers due to missing authentication | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-13717 | fixed in 1786123541 | Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model… | HIGH 8.8 | 0.6 % | ||
| CVE-2026-16745 | fixed in 1786109665 | Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation | HIGH 8.8 | 0.5 % | ||
| CVE-2026-15574 | fixed in 1791363252 | Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default | HIGH 7.5 | 0.5 % | ||
| CVE-2026-15143 | fixed in 1791537794 | Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) | CRITICAL 9.3 | 0.5 % | ||
| CVE-2026-15378 | fixed in 1787360218 | Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) | CRITICAL 9.3 | 0.5 % | ||
| CVE-2026-15154 | | Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-58016 | | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | CRITICAL 9.1 | 0.6 % | ||
| CVE-2026-12912 | | Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image | HIGH 7.3 | 0.4 % | ||
| CVE-2026-55655 | | Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions | MEDIUM 6.1 | 0.1 % | ||
| CVE-2026-55653 | | Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to clien… | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-56211 | | Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames | HIGH 7.1 | 0.9 % | ||
| CVE-2026-56210 | | Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id | HIGH 7.1 | 0.6 % | ||
| CVE-2026-56209 | | Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack | HIGH 7.1 | 0.6 % | ||
| CVE-2026-56208 | | Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode | HIGH 7.6 | 0.6 % | ||
| CVE-2026-42014 | | Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin | MEDIUM 6.6 | 0.1 % | ||
| CVE-2026-5419 | | Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal | LOW 3.7 | 0.5 % | ||
| CVE-2026-10118 | | Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication | HIGH 7.8 | 0.3 % | ||
| CVE-2026-42015 | | Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling | MEDIUM 5.3 | 0.7 % | ||
| CVE-2026-42013 | | Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name | HIGH 8.2 | 0.4 % | ||
| CVE-2026-42012 | | Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans | HIGH 7.1 | 0.4 % | ||
| CVE-2026-5260 | | Gnutls: gnutls: information disclosure via heap overread in rsa key exchange | HIGH 8.2 | 0.8 % | ||
| CVE-2026-42011 | | Gnutls: gnutls: security bypass due to incorrect name constraint handling | HIGH 7.4 | 0.5 % | ||
| CVE-2026-42010 | | Gnutls: gnutls: authentication bypass via nul character in username | CRITICAL 9.8 | 1.1 % | ||
| CVE-2026-33846 | | Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly | HIGH 7.5 | 1.3 % | ||
| CVE-2026-33845 | | Gnutls: gnutls: denial of service via dtls zero-length fragment | CRITICAL 9.1 | 2.1 % | ||
| CVE-2026-3833 | | Gnutls: gnutls: policy bypass due to case-sensitive nameconstraints comparison | HIGH 7.4 | 0.6 % | ||
| CVE-2026-4878 | | Libcap: libcap: privilege escalation via toctou race condition in cap_set_file() | HIGH 7.0 | 0.2 % | ||
| CVE-2026-4775 | | Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing | HIGH 7.8 | 0.6 % | ||
| CVE-2025-14512 | | Glib: integer overflow in glib gio attribute escaping causes heap buffer overflow | MEDIUM 6.5 | 0.6 % | ||
| CVE-2025-14087 | | Glib: glib: buffer underflow in gvariant parser leads to heap corruption | CRITICAL 9.8 | 0.8 % | ||
| CVE-2025-10911 | | Libxslt: use-after-free with key data stored cross-rvt | MEDIUM 5.5 | 0.2 % | ||
| CVE-2023-52355 | | Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom | HIGH 7.5 | 1.8 % |