8.5
Élevée
CVE-2026-5483 A flaw was found in odh-dashboard in Red Hat Openshift AI
Description
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Produits et versions touchés
| Produit | Versions touchées | Corrigé en |
|---|---|---|
| Red Hat OpenShift AI 2.16 1775230902 | premières → < 1775230902 | 1775230902 |
| Red Hat OpenShift AI (RHOAI) | Versions non publiées | |
| Red Hat OpenShift AI 3.3 1775239958 | premières → < 1775239958 | 1775239958 |
| Red Hat OpenShift AI 2.25 1775234711 | premières → < 1775234711 | 1775234711 |
| Red Hat OpenShift AI 3.2 1775523049 | premières → < 1775523049 | 1775523049 |
Références
- RHSA-2026:7397 access.redhat.com
- RHSA-2026:7398 access.redhat.com
- RHSA-2026:7403 access.redhat.com
- RHSA-2026:7404 access.redhat.com
- access.redhat.com access.redhat.com
- RHBZ#2454764 bugzilla.redhat.com
Chronologie
- Publiée
- Dernière modification
Autres CVE de Red Hat OpenShift AI 2.16
Les 14 CVE de Red Hat OpenShift AI 2.16 →
CVE-2026-2229
ImpactThe undici WebSocket client is vulnerable to a denial-of-service attack due to improper validation of…
7.5
Élevée
CVE-2026-1528
ImpactA server can reply with a WebSocket frame using the 64-bit length form and an extremely large length
7.5
Élevée
CVE-2026-1526
The undici WebSocket client is vulnerable to a denial-of-service attack via unbounded memory consumption during…
7.5
Élevée
CVE-2026-32141
flatted is a circular JSON parser
7.5
Élevée