Red Hat Red Hat OpenShift AI 3.5
17 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-114406 | | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | MEDIUM 6.8 | 0.3 % | ||
| CVE-2026-74860 | | Libxml2: double-free/uaf in libxml2 python bindings | HIGH 8.5 | 0.7 % | ||
| CVE-2026-86332 | fixed in 1791945160 | Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-18620 | | Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy | HIGH 7.1 | 0.5 % | ||
| CVE-2026-18618 | fixed in 1786552271 | Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener | HIGH 7.5 | 0.8 % | ||
| CVE-2026-18611 | | Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials | HIGH 7.5 | 0.6 % | ||
| CVE-2026-18982 | fixed in 1786552271 | Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles | HIGH 8.8 | 0.8 % | ||
| CVE-2026-18951 | fixed in 1786552271 | Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole | HIGH 8.8 | 0.9 % | ||
| CVE-2026-18617 | | Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from op… | HIGH 8.8 | 0.7 % | ||
| CVE-2026-18608 | | Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide | HIGH 8.7 | 0.7 % | ||
| CVE-2026-15581 | | Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api… | HIGH 8.0 | 0.4 % | ||
| CVE-2026-15467 | fixed in 1786552271 | Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allow… | HIGH 8.1 | 0.6 % | ||
| CVE-2026-55655 | | Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions | MEDIUM 6.1 | 0.1 % | ||
| CVE-2026-55653 | | Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to clien… | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-56211 | | Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames | HIGH 7.1 | 0.9 % | ||
| CVE-2026-56210 | | Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id | HIGH 7.1 | 0.6 % | ||
| CVE-2026-56209 | | Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack | HIGH 7.1 | 0.6 % |