Vulnerability · Published Oct 28, 2026 · Assigned by redhat
CVE-2026-117574Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization
Critical 9.1
In plain English
A critical-severity authorization bypass via user-controlled key in Red Hat OpenShift AI (RHOAI) from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.2% (higher than 15% of all known vulnerabilities).
Official description
A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's application programming interface (API) keys into the request. This flaw allows an attacker to perform unauthorized requests and consume another tenant's large language model (LLM) resources and quotas.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat OpenShift AI (RHOAI) | see references |
| Red Hat | Red Hat OpenShift AI (RHOAI) | see references |
Weakness: CWE-639 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L
References
- https://access.redhat.com/security/cve/CVE-2026-117574 vdb-entry, x_refsource_REDHAT
- RHBZ#2494861 issue-tracking, x_refsource_REDHAT