What’s Vulnerable › Products
Red Hat OpenShift AI 3.3 vulnerabilities
26 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 26 published in the last 12 months.
Check whether your Red Hat OpenShift AI 3.3 version is affected
Latest Red Hat OpenShift AI 3.3 vulnerabilities
- CVE-2026-18982 — Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles (CVSS 8.8)
- CVE-2026-18951 — Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole (CVSS 8.8)
- CVE-2026-18950 — Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation (CVSS 8.8)
- CVE-2026-18949 — Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources (CVSS 8.8)
- CVE-2026-18948 — Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server (CVSS 9.9)
- CVE-2026-18947 — Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization (CVSS 8.5)
- CVE-2026-18941 — Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication (CVSS 7.7)
- CVE-2026-18621 — Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening (CVSS 7.6)
- CVE-2026-18620 — Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy (CVSS 7.1)
- CVE-2026-18618 — Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener (CVSS 7.5)
- CVE-2026-18617 — Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod (CVSS 8.8)
- CVE-2026-18611 — Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials (CVSS 7.5)
- CVE-2026-18608 — Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide (CVSS 8.7)
- CVE-2026-16456 — Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy (CVSS 6.5)
- CVE-2026-15581 — Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide (CVSS 8.0)
- CVE-2026-15467 — Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override (CVSS 8.1)
- CVE-2026-16745 — Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation (CVSS 8.8)
- CVE-2026-16118 — Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c (CVSS 7.1)
- CVE-2026-15378 — Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:) (CVSS 9.3)
- CVE-2026-55655 — Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions (CVSS 6.1)
- CVE-2026-55653 — Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service (CVSS 6.5)
- CVE-2026-56211 — Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames (CVSS 7.1)
- CVE-2026-56210 — Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id (CVSS 7.1)
- CVE-2026-56209 — Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack (CVSS 7.1)
- CVE-2026-56208 — Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode (CVSS 7.6)