CVE-2026-15467: Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override

Severity: high (CVSS 8.1 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.6% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-10 · updated 2026-09-21
Weakness: CWE-266

Description

A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.

Affected products

Red Hat OpenShift AI 2.25: all versions — fixed in 1785187119
Red Hat OpenShift AI 3.3: all versions — fixed in 1785187521
Red Hat OpenShift AI 3.4: all versions — fixed in 1784993206, 1786614608
Red Hat OpenShift AI 3.5: all versions — fixed in 1786552250, 1786552271

How to fix

Upgrade to a fixed version: Red Hat OpenShift AI 2.25 1785187119; Red Hat OpenShift AI 3.3 1785187521; Red Hat OpenShift AI 3.4 1784993206, 1786614608; Red Hat OpenShift AI 3.5 1786552250, 1786552271. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-15467 or the next vulnerability affects your stack