CVE-2026-15143: Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

Severity: critical (CVSS 9.3 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.5% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-07-10 · updated 2026-10-25
Weakness: CWE-918

Description

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.

Affected products

Red Hat OpenShift AI 2.25: all versions — fixed in 1791364320, 1791367475
Red Hat OpenShift AI 3.4: all versions — fixed in 1791535841, 1791537794

How to fix

Upgrade to a fixed version: Red Hat OpenShift AI 2.25 1791364320, 1791367475; Red Hat OpenShift AI 3.4 1791535841, 1791537794. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-15143 or the next vulnerability affects your stack