Red Hat Red Hat OpenShift AI (RHOAI)
34 published vulnerabilities name this product.
As the CNAs write it in their CVE records (vendor and product); the versions are theirs.
| CVE | Vulnerable versions | Title | Severity | Published | EPSS | Exploitation |
|---|---|---|---|---|---|---|
| CVE-2026-117574 | | Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-proc… | CRITICAL 9.1 | 0.2 % | ||
| CVE-2026-13451 | | Kserve: kserve: server-side request forgery via malicious storageuri | HIGH 7.7 | 0.2 % | ||
| CVE-2026-114236 | | Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers | LOW 3.3 | 0.1 % | ||
| CVE-2026-17557 | | Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding | MEDIUM 6.5 | 0.3 % | ||
| CVE-2026-108334 | | Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant… | HIGH 7.4 | 0.3 % | ||
| CVE-2026-87743 | | Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security | HIGH 7.5 | 0.5 % | ||
| CVE-2026-92091 | | Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array | MEDIUM 5.9 | 0.6 % | ||
| CVE-2026-86332 | | Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-84185 | | Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification | MEDIUM 5.9 | 0.1 % | ||
| CVE-2026-18393 | | Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor | MEDIUM 5.4 | 0.4 % | ||
| CVE-2026-80179 | | Jwcrypto: jwcrypto: denial of service via malformed jwe tokens | MEDIUM 5.9 | 0.4 % | ||
| CVE-2026-18950 | | Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation | HIGH 8.8 | 0.5 % | ||
| CVE-2026-18948 | | Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server | CRITICAL 9.9 | 1.1 % | ||
| CVE-2026-18947 | | Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization | HIGH 8.5 | 0.6 % | ||
| CVE-2026-18942 | | Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation | MEDIUM 5.5 | 0.4 % | ||
| CVE-2026-18941 | | Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication | HIGH 7.7 | 0.9 % | ||
| CVE-2026-14450 | | Maas-billing: maas api: privilege escalation via forged http headers due to missing authentication | CRITICAL 9.9 | 0.7 % | ||
| CVE-2026-13717 | | Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model… | HIGH 8.8 | 0.6 % | ||
| CVE-2026-23538 | | Feast: resource exhaustion via websocket endpoint | HIGH 7.5 | 0.9 % | ||
| CVE-2026-15063 | | Trustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabled | MEDIUM 6.3 | 0.3 % | ||
| CVE-2026-15044 | | Trustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apis | MEDIUM 6.3 | 0.2 % | ||
| CVE-2026-23537 | | Feast: unauthenticated arbitrary file write | CRITICAL 9.1 | 1.0 % | ||
| CVE-2026-12706 | | Ffmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move() | MEDIUM 6.5 | 0.5 % | ||
| CVE-2026-12491 | | Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations | MEDIUM 4.8 | 0.2 % | ||
| CVE-2026-6385 | | Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser | MEDIUM 6.5 | 0.4 % | ||
| CVE-2026-5483 | | Odh-dashboard: odh dashboard kubernetes service account exposure | CRITICAL 9.9 | 0.5 % | ||
| CVE-2025-12805 | | Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy | HIGH 8.1 | 0.4 % | ||
| CVE-2026-23536 | | Feast: unauthenticated arbitrary file read | HIGH 7.5 | 2.4 % | ||
| CVE-2025-13327 | | Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials | MEDIUM 6.3 | 0.2 % | ||
| CVE-2025-11065 | | Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure | MEDIUM 5.3 | 0.4 % | ||
| CVE-2026-0603 | | Org.hibernate/hibernate-core: hibernate: information disclosure and data deletion via second-order sql injection | HIGH 8.3 | 1.0 % | ||
| CVE-2025-12103 | | Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace | MEDIUM 5.0 | 0.3 % | ||
| CVE-2025-6193 | | Trustyai-explainability: command injection via lmevaljob cr | MEDIUM 5.9 | 0.7 % | ||
| CVE-2025-4574 | | Crossbeam-channel: crossbeam-channel vulnerable to double free on drop | MEDIUM 6.5 | 0.6 % |