8.5
High
CVE-2026-5483 A flaw was found in odh-dashboard in Red Hat Openshift AI
Description
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Affected products and versions
| Product | Affected versions | Fixed in |
|---|---|---|
| Red Hat OpenShift AI 2.16 1775230902 | earliest → < 1775230902 | 1775230902 |
| Red Hat OpenShift AI (RHOAI) | Versions not published | |
| Red Hat OpenShift AI 3.3 1775239958 | earliest → < 1775239958 | 1775239958 |
| Red Hat OpenShift AI 2.25 1775234711 | earliest → < 1775234711 | 1775234711 |
| Red Hat OpenShift AI 3.2 1775523049 | earliest → < 1775523049 | 1775523049 |
References
- RHSA-2026:7397 access.redhat.com
- RHSA-2026:7398 access.redhat.com
- RHSA-2026:7403 access.redhat.com
- RHSA-2026:7404 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2454764 bugzilla.redhat.com
Timeline
- Published
- Last modified
Other CVEs of Red Hat OpenShift AI 2.16
The 14 CVEs of Red Hat OpenShift AI 2.16 →
CVE-2026-2229
ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…
7.5
High
CVE-2026-1528
ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length
7.5
High
CVE-2026-1526
The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…
7.5
High
CVE-2026-32141
flatted is a circular JSON parser
7.5
High