Vulnerability · Published Oct 21, 2026 · Assigned by redhat

CVE-2026-17557Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding

Medium 6.5

In plain English

A medium-severity server-side request forgery in Red Hat OpenShift AI (RHOAI) from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.3% (higher than 26% of all known vulnerabilities).

Severity (CVSS 3.1)6.5Medium

Exploit odds (30 days)0.3%top 74.0% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malicious model URL in the `JobSpec`. This vulnerability allows for the disclosure of the tenant's model authentication secret to an attacker-controlled external listener. Additionally, it enables Server-Side Request Forgery (SSRF) attacks against internal network endpoints reachable from the evaluation job pod.

Affected products (as reported)

Vendor	Product	Versions
Red Hat	Red Hat OpenShift AI (RHOAI)	see references

Weakness: CWE-918 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N

References

https://access.redhat.com/security/cve/CVE-2026-17557 vdb-entry, x_refsource_REDHAT
RHBZ#2507452 issue-tracking, x_refsource_REDHAT