Vulnerabilities of Red Hat Red Hat OpenShift AI 3.3

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-18620	A flaw was found in Data Science Pipelines	7.1 High	Aug 10, 2026
CVE-2026-18618	A flaw was found in ml-metadata	7.5 High	Aug 10, 2026
CVE-2026-18611	A flaw was found in the Data Science Pipelines Operator	7.5 High	Aug 10, 2026
CVE-2026-18982	A flaw was found in the RHOAI training-operator	8.8 High	Aug 10, 2026
CVE-2026-18951	A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator	8.8 High	Aug 10, 2026
CVE-2026-18950	A flaw was found in odh-dashboard	8.8 High	Aug 10, 2026
CVE-2026-18949	A flaw was found in odh-dashboard	8.8 High	Aug 10, 2026
CVE-2026-18948	A flaw was found in Feast	9.9 Critical	Aug 10, 2026
CVE-2026-18947	A flaw was found in Feast	8.5 High	Aug 10, 2026
CVE-2026-18941	A flaw was found in Feast and feast-operator	7.7 High	Aug 10, 2026
CVE-2026-18621	A flaw was found in Data Science Pipelines (DSP)	7.6 High	Aug 10, 2026
CVE-2026-18617	A flaw was found in the Data Science Pipelines Operator (DSPO)	8.8 High	Aug 10, 2026
CVE-2026-18608	A flaw was found in the Data Science Pipelines Operator (DSPO)	8.7 High	Aug 10, 2026
CVE-2026-16456	A flaw was found in the `odh-model-controller`	6.5 Medium	Aug 10, 2026
CVE-2026-15581	A flaw was found in the TrustyAI Service (TAS) deployment	8.0 High	Aug 10, 2026
CVE-2026-15467	A flaw was found in the trustyai-service-operator's LMEvalJob controller	8.1 High	Aug 10, 2026
CVE-2026-16745	A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI)	8.8 High	Jul 23, 2026
CVE-2026-16118	Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c	7.1 High	Jul 17, 2026
CVE-2026-15378	A flaw was found in the `guardrails-detectors` component	9.3 Critical	Jul 10, 2026
CVE-2026-15154	A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI	6.5 Medium	Jul 8, 2026
CVE-2026-55655	Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	5.0 Medium	Jun 23, 2026
CVE-2026-55653	Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	4.3 Medium	Jun 23, 2026
CVE-2026-56210	Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id	7.1 High	Jun 19, 2026
CVE-2026-56211	Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames	7.1 High	Jun 19, 2026
CVE-2026-56208	Libaom: libaom: heap buffer overflow in av1 encoder first-pass stats buffer via lap mode	7.6 High	Jun 19, 2026

Other Red Hat products