Log in Start free

Vulnerability · Published Aug 10, 2026 · Assigned by redhat

CVE-2026-18621Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

High 7.6

In plain English

A high-severity security flaw in Red Hat AI Inference Server from Red Hat. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.5% (higher than 44% of all known vulnerabilities).

Severity (CVSS 3.1)7.6High
Exploit odds (30 days)0.5%top 55.6% of all CVEs
Exploited in the wildNo reportsCISA SSVC: none
Attack toolingNoneno public tooling known

Official description

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf of the attacker. Successful exploitation grants the attacker node-root access, enabling arbitrary code execution and full control over the underlying node.

Affected products (as reported)

VendorProductVersions
Red Hat Red Hat OpenShift AI 2.25 see references
Red Hat Red Hat OpenShift AI 2.25 see references
Red Hat Red Hat OpenShift AI 3.3 see references
Red Hat Red Hat OpenShift AI 3.4 see references
Red Hat Red Hat OpenShift AI 3.4 see references
Red Hat Red Hat OpenShift AI 3.4 see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references
Red Hat Red Hat AI Inference Server see references

Weakness: CWE-266 · Vector: CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:L

References