Vulnerabilities of Red Hat Red Hat OpenShift AI (RHOAI)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-117574	A flaw was found in ai-gateway-payload-processing	9.1 Critical	Oct 28, 2026
CVE-2026-18948	A flaw was found in Feast	9.9 Critical	Aug 10, 2026
CVE-2026-14450	A flaw was found in the MaaS API	9.9 Critical	Aug 10, 2026
CVE-2026-15143	A flaw was found in the file_type content detector of guardrails-detectors	9.3 Critical	Jul 10, 2026
CVE-2026-15378	A flaw was found in the `guardrails-detectors` component	9.3 Critical	Jul 10, 2026
CVE-2026-23537	A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an…	9.1 Critical	Jul 1, 2026
CVE-2026-56121	Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized…	9.3 Critical	Jun 24, 2026
CVE-2026-48746	vLLM is an inference and serving engine for large language models (LLMs)	9.1 Critical	Jun 22, 2026
CVE-2026-49468	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	9.5 Critical	Jun 22, 2026
CVE-2026-44727	Jupyter Server is the backend for Jupyter web applications	9.3 Critical	Jun 22, 2026
CVE-2026-44990	ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer…	9.3 Critical	Jun 12, 2026
CVE-2026-45833	A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated…	9.4 Critical	Jun 12, 2026
CVE-2026-4035	A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI…	9.1 Critical	Jun 3, 2026
CVE-2026-49121	AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in…	9.2 Critical	Jun 1, 2026
CVE-2026-2651	A vulnerability in MLflow…	9.0 Critical	May 25, 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critical	May 22, 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critical	May 22, 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critical	May 22, 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critical	May 22, 2026
CVE-2026-39832	When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not…	9.1 Critical	May 22, 2026
CVE-2026-2611	In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints	9.6 Critical	May 19, 2026
CVE-2026-44484	PyTorch Lightning is a deep learning framework to pretrain and finetune AI models	9.3 Critical	May 14, 2026
CVE-2026-31230	The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its…	9.8 Critical	May 12, 2026
CVE-2026-31236	The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument	9.8 Critical	May 12, 2026
CVE-2026-31228	The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow…	9.8 Critical	May 12, 2026

Other Red Hat products