What’s Vulnerable › Products
Red Hat OpenShift AI 3.4 vulnerabilities
56 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 56 published in the last 12 months.
Check whether your Red Hat OpenShift AI 3.4 version is affected
Latest Red Hat OpenShift AI 3.4 vulnerabilities
- CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)
- CVE-2026-96512 — Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization (CVSS 7.8)
- CVE-2026-74860 — Libxml2: double-free/uaf in libxml2 python bindings (CVSS 8.5)
- CVE-2026-15218 — Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation (CVSS 7.9)
- CVE-2026-18982 — Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles (CVSS 8.8)
- CVE-2026-18951 — Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole (CVSS 8.8)
- CVE-2026-18950 — Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation (CVSS 8.8)
- CVE-2026-18949 — Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources (CVSS 8.8)
- CVE-2026-18948 — Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server (CVSS 9.9)
- CVE-2026-18947 — Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization (CVSS 8.5)
- CVE-2026-18942 — Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation (CVSS 5.5)
- CVE-2026-18941 — Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication (CVSS 7.7)
- CVE-2026-18621 — Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening (CVSS 7.6)
- CVE-2026-18620 — Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy (CVSS 7.1)
- CVE-2026-18618 — Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener (CVSS 7.5)
- CVE-2026-18617 — Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod (CVSS 8.8)
- CVE-2026-18611 — Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials (CVSS 7.5)
- CVE-2026-18608 — Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide (CVSS 8.7)
- CVE-2026-16456 — Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy (CVSS 6.5)
- CVE-2026-15581 — Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide (CVSS 8.0)
- CVE-2026-15467 — Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override (CVSS 8.1)
- CVE-2026-14450 — Maas-billing: maas api: privilege escalation via forged http headers due to missing authentication (CVSS 9.9)
- CVE-2026-13717 — Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs) (CVSS 8.8)
- CVE-2026-16745 — Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation (CVSS 8.8)
- CVE-2026-15588 — Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering (CVSS 5.3)