Vulnerabilities of Red Hat Red Hat OpenShift AI 3.5

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-114406	Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns	6.8 Medium	Oct 21, 2026
CVE-2026-96889	Librsvg: use-after-free when xml includes have duplicated entities	7.8 High	Sep 23, 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 High	Sep 8, 2026
CVE-2026-86332	A flaw was found in odh-dashboard in Red Hat OpenShift AI	6.5 Medium	Sep 7, 2026
CVE-2026-18620	A flaw was found in Data Science Pipelines	7.1 High	Aug 10, 2026
CVE-2026-18618	A flaw was found in ml-metadata	7.5 High	Aug 10, 2026
CVE-2026-18611	A flaw was found in the Data Science Pipelines Operator	7.5 High	Aug 10, 2026
CVE-2026-18982	A flaw was found in the RHOAI training-operator	8.8 High	Aug 10, 2026
CVE-2026-18951	A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator	8.8 High	Aug 10, 2026
CVE-2026-18617	A flaw was found in the Data Science Pipelines Operator (DSPO)	8.8 High	Aug 10, 2026
CVE-2026-18608	A flaw was found in the Data Science Pipelines Operator (DSPO)	8.7 High	Aug 10, 2026
CVE-2026-15581	A flaw was found in the TrustyAI Service (TAS) deployment	8.0 High	Aug 10, 2026
CVE-2026-15467	A flaw was found in the trustyai-service-operator's LMEvalJob controller	8.1 High	Aug 10, 2026
CVE-2026-15588	Gdbusserver: glib2: gdbusserver pre-authentication dos via unbounded sasl line buffering	5.3 Medium	Jul 20, 2026
CVE-2026-16118	Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c	7.1 High	Jul 17, 2026
CVE-2026-58015	Glib: path traversal in glib/gio/gdbusauthmechanismsha1.c via keyring_lookup_entry and mechanism_client_data_receive	5.9 Medium	Jun 30, 2026
CVE-2026-58014	Glib: off-by-one error in glib/gkeyfile.c via "g_key_file_get_locale_string_list"	7.3 High	Jun 30, 2026
CVE-2026-58013	Glib: buffer over-read in glib/giochannel.c via "g_io_channel_read_line_backend"	6.5 Medium	Jun 30, 2026
CVE-2026-58012	Glib: buffer over-read in g_regex_replace() via glib/gregex.c:string_append() and g_utf8_next_char()	6.5 Medium	Jun 30, 2026
CVE-2026-58010	Glib: buffer over-read in glib/gvariant-serialiser.c via gvs_tuple_is_normal()	6.5 Medium	Jun 30, 2026
CVE-2026-58011	Glib: out-of-bounds read in glib/gdatetime.c:g_date_time_get_ymd via invalid gdatetime	6.5 Medium	Jun 30, 2026
CVE-2026-55655	Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions	5.0 Medium	Jun 23, 2026
CVE-2026-55653	Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service	4.3 Medium	Jun 23, 2026
CVE-2026-56210	Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id	7.1 High	Jun 19, 2026
CVE-2026-56211	Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames	7.1 High	Jun 19, 2026

Other Red Hat products