What’s Vulnerable › Products

Red Hat OpenShift AI 3.0 vulnerabilities

18 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 18 published in the last 12 months.

Check whether your Red Hat OpenShift AI 3.0 version is affected

Latest Red Hat OpenShift AI 3.0 vulnerabilities

• CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)
• CVE-2026-96512 — Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization (CVSS 7.8)
• CVE-2026-74860 — Libxml2: double-free/uaf in libxml2 python bindings (CVSS 8.5)
• CVE-2026-15588 — Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering (CVSS 5.3)
• CVE-2026-16118 — Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c (CVSS 7.1)
• CVE-2026-58015 — Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive (CVSS 7.5)
• CVE-2026-58014 — Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list" (CVSS 8.6)
• CVE-2026-58013 — Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend" (CVSS 8.2)
• CVE-2026-58012 — Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char() (CVSS 8.2)
• CVE-2026-58011 — Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime (CVSS 7.5)
• CVE-2026-58010 — Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal() (CVSS 8.2)
• CVE-2026-14164 — Libarchive: double-free vulnerability in rar5 decompression logic via dangling filtered_buf pointer in init_unpack() (CVSS 7.5)
• CVE-2026-12912 — Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image (CVSS 7.3)
• CVE-2026-55655 — Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions (CVSS 6.1)
• CVE-2026-55653 — Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service (CVSS 6.5)
• CVE-2025-13327 — Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials (CVSS 6.3)
• CVE-2025-12103 — Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace (CVSS 5.0)
• CVE-2025-6170 — Libxml2: stack buffer overflow in xmllint interactive shell command handling (CVSS 2.5)