CVE-2026-18951: Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole

Severity: high (CVSS 8.8 v3.1)
Exploited in the wild: not listed in CISA KEV
EPSS: 0.9% probability of exploitation in the next 30 days
Public exploit or detection template: none known
Published: 2026-08-10 · updated 2026-09-30
Weakness: CWE-267

Description

A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespace to create, modify, and delete `TrainJobs`. When combined with a separate vulnerability (TRN-01) that permits arbitrary pod configurations, a remote attacker with namespace editor privileges could exploit this to escalate privileges, potentially leading to arbitrary code execution.

Affected products

Red Hat OpenShift AI 3.3: all versions — fixed in 1785188461, 1790137153
Red Hat OpenShift AI 3.4: all versions — fixed in 1784814352, 1787361677
Red Hat OpenShift AI 3.5: all versions — fixed in 1786552250, 1786552271

How to fix

Upgrade to a fixed version: Red Hat OpenShift AI 3.3 1785188461, 1790137153; Red Hat OpenShift AI 3.4 1784814352, 1787361677; Red Hat OpenShift AI 3.5 1786552250, 1786552271. Check the vendor advisory for mitigations.

References

Get alerted when CVE-2026-18951 or the next vulnerability affects your stack