CVE-2026-18618: Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

Severity: high (CVSS 7.5 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.8% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-10 · updated 2026-10-19
Weakness: CWE-770

Description

A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service (DoS) issues. An in-cluster attacker, with network access to the MLMD pod, could exploit these vulnerabilities by sending specially crafted HTTP/2 requests. This could lead to a denial of service by crashing the MLMD pod, disrupting all pipeline runs in the affected namespace.

Affected products

Red Hat OpenShift AI 2.25: all versions — fixed in 1785260280
Red Hat OpenShift AI 3.3: all versions — fixed in 1785262015
Red Hat OpenShift AI 3.4: all versions — fixed in 1785269945, 1791865241
Red Hat OpenShift AI 3.5: all versions — fixed in 1786552250, 1786552271

How to fix

Upgrade to a fixed version: Red Hat OpenShift AI 2.25 1785260280; Red Hat OpenShift AI 3.3 1785262015; Red Hat OpenShift AI 3.4 1785269945, 1791865241; Red Hat OpenShift AI 3.5 1786552250, 1786552271. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-18618 or the next vulnerability affects your stack