CVE-2026-13717: Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-10 · updated 2026-10-29
Weakness: CWE-284

Description

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.

Affected products

llm-d: all versions
Red Hat OpenShift AI 3.4: all versions — fixed in 1786123541
Red Hat OpenShift AI (RHOAI): all versions

How to fix

Upgrade to a fixed version: Red Hat OpenShift AI 3.4 1786123541. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-13717 or the next vulnerability affects your stack