Vulnerabilities of Red Hat Red Hat OpenShift AI 3.4

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-96889	Librsvg: use-after-free when xml includes have duplicated entities	7.8 High	Sep 23, 2026
CVE-2026-96512	A flaw was found in sudo	7.8 High	Sep 23, 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 High	Sep 8, 2026
CVE-2026-15218	A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI	7.9 High	Aug 17, 2026
CVE-2026-18620	A flaw was found in Data Science Pipelines	7.1 High	Aug 10, 2026
CVE-2026-18618	A flaw was found in ml-metadata	7.5 High	Aug 10, 2026
CVE-2026-18611	A flaw was found in the Data Science Pipelines Operator	7.5 High	Aug 10, 2026
CVE-2026-18982	A flaw was found in the RHOAI training-operator	8.8 High	Aug 10, 2026
CVE-2026-18951	A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator	8.8 High	Aug 10, 2026
CVE-2026-18950	A flaw was found in odh-dashboard	8.8 High	Aug 10, 2026
CVE-2026-18949	A flaw was found in odh-dashboard	8.8 High	Aug 10, 2026
CVE-2026-18948	A flaw was found in Feast	9.9 Critical	Aug 10, 2026
CVE-2026-18947	A flaw was found in Feast	8.5 High	Aug 10, 2026
CVE-2026-18942	A flaw was found in the Feast operator	5.5 Medium	Aug 10, 2026
CVE-2026-18941	A flaw was found in Feast and feast-operator	7.7 High	Aug 10, 2026
CVE-2026-18621	A flaw was found in Data Science Pipelines (DSP)	7.6 High	Aug 10, 2026
CVE-2026-18617	A flaw was found in the Data Science Pipelines Operator (DSPO)	8.8 High	Aug 10, 2026
CVE-2026-18608	A flaw was found in the Data Science Pipelines Operator (DSPO)	8.7 High	Aug 10, 2026
CVE-2026-16456	A flaw was found in the `odh-model-controller`	6.5 Medium	Aug 10, 2026
CVE-2026-15581	A flaw was found in the TrustyAI Service (TAS) deployment	8.0 High	Aug 10, 2026
CVE-2026-15467	A flaw was found in the trustyai-service-operator's LMEvalJob controller	8.1 High	Aug 10, 2026
CVE-2026-14450	A flaw was found in the MaaS API	9.9 Critical	Aug 10, 2026
CVE-2026-13717	A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway	8.8 High	Aug 10, 2026
CVE-2026-16745	A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI)	8.8 High	Jul 23, 2026

Other Red Hat products