Log in Start free

Vulnerability · Published Jul 8, 2026 · Assigned by redhat

CVE-2026-15154Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

Medium 6.5

In plain English

A medium-severity regular-expression denial of service in guardrails-detectors. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 41% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium
Exploit odds (30 days)0.5%top 58.7% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking, leading to a worker process consuming 100% CPU indefinitely and resulting in a denial of service for the entire guardrails-mediated LLM pipeline.

Affected products (as reported)

VendorProductVersions
guardrails-detectors 0 – before d857e059f8a2dedb5c7ea9a2c307c4cfd7983fd1
Red Hat Red Hat OpenShift AI 2.25 see references
Red Hat Red Hat OpenShift AI 2.25 see references
Red Hat Red Hat OpenShift AI 3.3 see references
Red Hat Red Hat OpenShift AI 3.3 see references
Red Hat Red Hat OpenShift AI 3.4 see references
Red Hat Red Hat OpenShift AI 3.4 see references

Weakness: CWE-1333 · Vector: CVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:H

References