CVE-2026-16456: Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy

Severity: medium (CVSS 6.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.4% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-10 · updated 2026-08-14
Weakness: CWE-441

Description

A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the `loadSecret` function. This function improperly reads the Secret namespace from user-controlled input without validation. This allows an attacker to read sensitive API keys and cloud credentials from other namespaces, leading to information disclosure.

Affected products

Red Hat OpenShift AI 2.25: all versions — fixed in 1785187158
Red Hat OpenShift AI 3.3: all versions — fixed in 1785189333
Red Hat OpenShift AI 3.4: all versions — fixed in 1784950479

How to fix

Upgrade to a fixed version: Red Hat OpenShift AI 2.25 1785187158; Red Hat OpenShift AI 3.3 1785189333; Red Hat OpenShift AI 3.4 1784950479. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-16456 or the next vulnerability affects your stack