Vulnerability · Published Aug 17, 2026 · Assigned by redhat

CVE-2026-15218Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation

High 7.9

In plain English

A high-severity security flaw in maas-api. There are no confirmed reports of exploitation so far. The chance it is exploited in the next 30 days is estimated at 0.7% (higher than 54% of all known vulnerabilities).

Severity (CVSS 3.1)7.9High

Exploit odds (30 days)0.7%top 46.5% of all CVEs

Exploited in the wildNo reportsCISA SSVC: none

Attack toolingNoneno public tooling known

Official description

A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identity of these ServiceAccounts, either through a remote code execution vulnerability or by creating a malicious pod in the same namespace, could exploit these excessive permissions. This could lead to full cluster administrator privileges through the creation of new ClusterRoleBindings or the disclosure of sensitive information by accessing all secrets across the cluster.

Affected products (as reported)

Vendor	Product	Versions
	maas-api	0 – before *
	maas-controller	0 – before *
Red Hat	Red Hat OpenShift AI 3.4	see references
Red Hat	Red Hat OpenShift AI 3.4	see references

Weakness: CWE-266 · Vector: CVSS:3.1/AV:N/AC:H/PR:H/UI:N/S:C/C:H/I:H/A:L

References

RHSA-2026:60520 vendor-advisory, x_refsource_REDHAT
RHSA-2026:84734 vendor-advisory, x_refsource_REDHAT
https://access.redhat.com/security/cve/CVE-2026-15218 vdb-entry, x_refsource_REDHAT
RHBZ#2498426 issue-tracking, x_refsource_REDHAT