Vulnérabilités de Red Hat Red Hat OpenShift AI (RHOAI)

Votre version est-elle touchée ?

Liste des CVE

CVE	Résumé	Score	Publiée
CVE-2026-117574	A flaw was found in ai-gateway-payload-processing	9.1 Critique	28 oct. 2026
CVE-2026-18948	A flaw was found in Feast	9.9 Critique	10 août 2026
CVE-2026-14450	A flaw was found in the MaaS API	9.9 Critique	10 août 2026
CVE-2026-15143	A flaw was found in the file_type content detector of guardrails-detectors	9.3 Critique	10 juil. 2026
CVE-2026-15378	A flaw was found in the `guardrails-detectors` component	9.3 Critique	10 juil. 2026
CVE-2026-23537	A vulnerability has been identified in the Feast Feature Server’s `/save-document` endpoint that allows an…	9.1 Critique	1 juil. 2026
CVE-2026-56121	Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized…	9.3 Critique	24 juin 2026
CVE-2026-48746	vLLM is an inference and serving engine for large language models (LLMs)	9.1 Critique	22 juin 2026
CVE-2026-49468	LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format	9.5 Critique	22 juin 2026
CVE-2026-44727	Jupyter Server is the backend for Jupyter web applications	9.3 Critique	22 juin 2026
CVE-2026-44990	ApostropheCMS is an open-source Node.js content management system, and sanitize-html provides a simple HTML sanitizer…	9.3 Critique	12 juin 2026
CVE-2026-45833	A code injection vulnerability in version 0.4.17 or later of the ChromaDB Python project allows an authenticated…	9.4 Critique	12 juin 2026
CVE-2026-4035	A vulnerability in mlflow/mlflow versions prior to 3.11.0 allows for the resolution of environment variables in AI…	9.1 Critique	3 juin 2026
CVE-2026-49121	AI Tensor Engine for ROCm (AITER) through 0.1.14 contains an unauthenticated remote code execution vulnerability in…	9.2 Critique	1 juin 2026
CVE-2026-2651	A vulnerability in MLflow…	9.0 Critique	25 mai 2026
CVE-2026-39821	The ToASCII and ToUnicode functions incorrectly accept Punycode-encoded labels that decode to an ASCII-only label	9.6 Critique	22 mai 2026
CVE-2026-42508	Previously, a revoked 'SignatureKey' belonging to a CA was not correctly checked for revocation	9.1 Critique	22 mai 2026
CVE-2026-46595	Previously, CVE-2024-45337 fixed an authorization bypass for misused ssh server configurations; if any other type of…	10.0 Critique	22 mai 2026
CVE-2026-39830	A malicious SSH peer could send unsolicited global request responses to fill an internal buffer, blocking the…	9.1 Critique	22 mai 2026
CVE-2026-39832	When adding a key to a remote agent constraint extensions such as restrict-destination-v00@openssh.com were not…	9.1 Critique	22 mai 2026
CVE-2026-2611	In MLflow version 3.9.0, the MLflow Assistant feature introduced improper origin validation in its /ajax-api endpoints	9.6 Critique	19 mai 2026
CVE-2026-44484	PyTorch Lightning is a deep learning framework to pretrain and finetune AI models	9.3 Critique	14 mai 2026
CVE-2026-31230	The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a command-line argument injection vulnerability in its…	9.8 Critique	12 mai 2026
CVE-2026-31236	The llm CLI tool thru 0.27.1 contains a critical code injection vulnerability via its --functions command-line argument	9.8 Critique	12 mai 2026
CVE-2026-31228	The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow…	9.8 Critique	12 mai 2026

Autres produits Red Hat