What’s Vulnerable › Products

Red Hat OpenShift AI 2.25 vulnerabilities

33 known vulnerabilities, 2 confirmed exploited in the wild (CISA KEV), 32 published in the last 12 months.

Check whether your Red Hat OpenShift AI 2.25 version is affected

Exploited Red Hat OpenShift AI 2.25 vulnerabilities

• CVE-2026-48710 — Kludex Starlette HTTP Request/Response Smuggling Vulnerability
• CVE-2026-42271 — BerriAI LiteLLM Command Injection Vulnerability

Latest Red Hat OpenShift AI 2.25 vulnerabilities

• CVE-2026-86332 — Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user (CVSS 6.5)
• CVE-2026-18982 — Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles (CVSS 8.8)
• CVE-2026-18950 — Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation (CVSS 8.8)
• CVE-2026-18949 — Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources (CVSS 8.8)
• CVE-2026-18948 — Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server (CVSS 9.9)
• CVE-2026-18947 — Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization (CVSS 8.5)
• CVE-2026-18942 — Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation (CVSS 5.5)
• CVE-2026-18941 — Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication (CVSS 7.7)
• CVE-2026-18621 — Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening (CVSS 7.6)
• CVE-2026-18620 — Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy (CVSS 7.1)
• CVE-2026-18618 — Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener (CVSS 7.5)
• CVE-2026-18617 — Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod (CVSS 8.8)
• CVE-2026-18611 — Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials (CVSS 7.5)
• CVE-2026-18608 — Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide (CVSS 8.7)
• CVE-2026-16456 — Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy (CVSS 6.5)
• CVE-2026-15581 — Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide (CVSS 8.0)
• CVE-2026-15467 — Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override (CVSS 8.1)
• CVE-2026-16745 — Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation (CVSS 8.8)
• CVE-2026-15574 — Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default (CVSS 7.5)
• CVE-2026-15143 — Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) (CVSS 9.3)
• CVE-2026-15378 — Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) (CVSS 9.3)
• CVE-2026-15154 — Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex (CVSS 6.5)
• CVE-2023-54365 — Traefik - Denial of Service via HTTP/2 Request Handling (CVSS 7.5)
• CVE-2026-46625 — JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection (CVSS 7.5)
• CVE-2026-48710 — Kludex Starlette HTTP Request/Response Smuggling Vulnerability (CVSS 6.5) — exploited