Red Hat Red Hat OpenShift AI 3.5

• CVE-2026-96889 High 7.8 Librsvg: use-after-free when xml includes have duplicated entities 0.6%
• CVE-2026-74860 High 8.5 Libxml2: double-free/uaf in libxml2 python bindings 0.7%
• CVE-2026-86332 Medium 6.5 Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user 0.4%
• CVE-2026-18620 High 7.1 Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy 0.5%
• CVE-2026-18618 High 7.5 Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener 0.8%
• CVE-2026-18611 High 7.5 Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials 0.6%
• CVE-2026-18982 High 8.8 Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles 0.8%
• CVE-2026-18951 High 8.8 Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole 0.9%
• CVE-2026-18617 High 8.8 Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod 0.7%
• CVE-2026-18608 High 8.7 Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide 0.7%
• CVE-2026-15581 High 8.0 Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide 0.4%
• CVE-2026-15467 High 8.1 Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override 0.6%
• CVE-2026-55655 Medium 5.0 Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions 0.1%
• CVE-2026-55653 Medium 4.3 Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service 0.5%
• CVE-2026-56211 High 7.1 Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames 0.9%
• CVE-2026-56210 High 7.1 Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id 0.6%
• CVE-2026-56208 High 7.6 Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode 0.6%
• CVE-2026-56209 High 7.1 Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack 0.6%