What’s Vulnerable › Products

Red Hat OpenShift AI (RHOAI) vulnerabilities

23 known vulnerabilities, 0 confirmed exploited in the wild (CISA KEV), 21 published in the last 12 months.

Check whether your Red Hat OpenShift AI (RHOAI) version is affected

Latest Red Hat OpenShift AI (RHOAI) vulnerabilities

• CVE-2026-117574 — Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization (CVSS 9.1)
• CVE-2026-13451 — Kserve: kserve: server-side request forgery via malicious storageuri (CVSS 7.7)
• CVE-2026-114406 — Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns (CVSS 6.8)
• CVE-2026-17557 — Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding (CVSS 6.5)
• CVE-2026-114236 — Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers (CVSS 3.3)
• CVE-2026-92091 — Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array (CVSS 5.9)
• CVE-2026-86332 — Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user (CVSS 6.5)
• CVE-2026-18393 — Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor (CVSS 5.4)
• CVE-2026-80179 — Jwcrypto: jwcrypto: denial of service via malformed jwe tokens (CVSS 5.9)
• CVE-2026-13717 — Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs) (CVSS 8.8)
• CVE-2026-15063 — Trustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabled (CVSS 6.3)
• CVE-2026-15044 — Trustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apis (CVSS 6.3)
• CVE-2026-12706 — Ffmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move() (CVSS 6.5)
• CVE-2026-12491 — Vllm: vllm: image exif rotation & png trns transparency not normalized, causing mismatch between model input and expectations (CVSS 4.8)
• CVE-2026-6385 — Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser (CVSS 6.5)
• CVE-2026-23536 — Feast: unauthenticated arbitrary file read (CVSS 7.5)
• CVE-2025-13327 — Uv: uv: specially crafted zip archives lead to arbitrary code execution due to parsing differentials (CVSS 6.3)
• CVE-2025-11065 — Github.com/go-viper/mapstructure/v2: go-viper's mapstructure may leak sensitive information in logs in github.com/go-viper/mapstructure (CVSS 5.3)
• CVE-2025-12103 — Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace (CVSS 5.0)
• CVE-2025-8556 — Github.com/cloudflare/circl: circl-fourq: missing and wrong validation can lead to incorrect results (CVSS 3.7)
• CVE-2025-6193 — Trustyai-explainability: command injection via lmevaljob cr (CVSS 5.9)
• CVE-2025-4574 — Crossbeam-channel: crossbeam-channel vulnerable to double free on drop (CVSS 6.5)
• CVE-2024-11831 — Npm-serialize-javascript: cross-site scripting (xss) in serialize-javascript (CVSS 5.4)