Red Hat Red Hat OpenShift AI 3.4

• CVE-2026-114406 Medium 6.8 Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns 0.3%
• CVE-2026-96889 High 7.8 Librsvg: use-after-free when xml includes have duplicated entities 0.6%
• CVE-2026-96512 High 7.8 Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization 0.3%
• CVE-2026-74860 High 8.5 Libxml2: double-free/uaf in libxml2 python bindings 0.7%
• CVE-2026-15218 High 7.9 Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation 0.7%
• CVE-2026-18620 High 7.1 Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy 0.5%
• CVE-2026-18618 High 7.5 Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener 0.8%
• CVE-2026-18611 High 7.5 Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials 0.6%
• CVE-2026-18982 High 8.8 Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles 0.8%
• CVE-2026-18951 High 8.8 Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole 0.9%
• CVE-2026-18950 High 8.8 Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation 0.5%
• CVE-2026-18949 High 8.8 Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources 0.7%
• CVE-2026-18948 Critical 9.9 Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server 1.1%
• CVE-2026-18947 High 8.5 Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization 0.6%
• CVE-2026-18942 Medium 5.5 Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation 0.4%
• CVE-2026-18941 High 7.7 Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication 0.9%
• CVE-2026-18621 High 7.6 Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening 0.5%
• CVE-2026-18617 High 8.8 Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod 0.7%
• CVE-2026-18608 High 8.7 Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide 0.7%
• CVE-2026-16456 Medium 6.5 Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy 0.4%
• CVE-2026-15581 High 8.0 Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide 0.4%
• CVE-2026-15467 High 8.1 Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override 0.6%
• CVE-2026-14450 Critical 9.9 Maas-billing: maas api: privilege escalation via forged http headers due to missing authentication 0.7%
• CVE-2026-13717 High 8.8 Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs) 0.6%
• CVE-2026-16745 High 8.8 Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation 0.5%
• CVE-2026-15574 High 7.5 Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default 0.5%
• CVE-2026-15143 Critical 9.3 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) 0.5%
• CVE-2026-15378 Critical 9.3 Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) 0.5%
• CVE-2026-15154 Medium 6.5 Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex 0.5%
• CVE-2026-58016 High 7.5 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" 0.6%
• CVE-2026-14164 High 7.5 Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() 0.8%
• CVE-2026-12912 High 7.3 Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image 0.4%
• CVE-2026-55655 Medium 5.0 Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions 0.1%
• CVE-2026-55653 Medium 4.3 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service 0.5%
• CVE-2026-56211 High 7.1 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames 0.9%
• CVE-2026-56210 High 7.1 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id 0.6%
• CVE-2026-56208 High 7.6 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode 0.6%
• CVE-2026-56209 High 7.1 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack 0.6%
• CVE-2026-42014 Medium 6.6 Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin 0.1%
• CVE-2026-5419 Low 3.7 Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal 0.5%
• CVE-2026-10118 High 7.8 Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication 0.3%
• CVE-2026-42015 Medium 5.3 Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling 0.7%
• CVE-2026-42013 High 8.2 Gnutls: gnutls: certificate validation bypass due to oversized subject alternative name 0.4%
• CVE-2026-42012 High 7.1 Gnutls: gnutls: certificate validation bypass due to improper handling of uri and srv sans 0.4%
• CVE-2026-5260 High 8.2 Gnutls: gnutls: information disclosure via heap overread in rsa key exchange 0.8%
• CVE-2026-48864 High 7.8 Libsolv: heap buffer overflow in libsolv repopagestore via unchecked decompression of malicious .solv page data 0.2%
• CVE-2026-42009 High 7.5 Gnutls: gnutls: denial of service via dtls packet reordering vulnerability 1.3%
• CVE-2026-42011 High 7.4 Gnutls: gnutls: security bypass due to incorrect name constraint handling 0.5%
• CVE-2026-42010 High 7.1 Gnutls: gnutls: authentication bypass via nul character in username 1.1%
• CVE-2026-33846 High 7.5 Gnutls: gnutls: denial of service via heap buffer overflow in dtls handshake fragment reassembly 1.3%