Vulnerability · Published Nov 7, 2026 · Assigned by redhat
CVE-2026-83495Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration
Unrated
In plain English
A privilege mismanagement in Red Hat OpenShift AI (RHOAI) from Red Hat. There are no confirmed reports of exploitation so far.
Severity (CVSS )–Not rated
Exploit odds (30 days)–no EPSS score yet
Exploited in the wildNo reportsnot in CISA KEV
Attack toolingNoneno public tooling known
Official description
A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting `valueFrom.secretKeyRef` into environment variable definitions. This allows them to read and exfiltrate sensitive information (secrets) from the namespace, leading to a privilege escalation. This occurs when the TrainJob Role-Based Access Control (RBAC) is broader than the Secret read RBAC.
Affected products (as reported)
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat OpenShift AI (RHOAI) | see references |
Weakness: CWE-269
References
- https://access.redhat.com/security/cve/CVE-2026-83495 vdb-entry, x_refsource_REDHAT
- RHBZ#2526350 issue-tracking, x_refsource_REDHAT