Known vulnerabilities in Red Hat OpenShift AI (RHOAI)

Is your version affected?

CVE list

CVE	Summary	Score	Published
CVE-2026-95519	Rpm: code execution via macro expansion of manifest entries in `rpmgi` (`-q -p` / verify manifest flows)	7.8 High	Sep 24, 2026
CVE-2026-96889	Librsvg: use-after-free when xml includes have duplicated entities	7.8 High	Sep 23, 2026
CVE-2026-95619	Gcc: libstdc++ integer overflow in `new` operator	7.7 High	Sep 22, 2026
CVE-2026-87743	A flaw was found in Quarkus HTTP security	7.5 High	Sep 18, 2026
CVE-2026-92925	Redis: redis: out-of-bounds read via crafted cluster bus packets	7.1 High	Sep 17, 2026
CVE-2026-92091	Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array	5.9 Medium	Sep 16, 2026
CVE-2026-85013	Environment-modules: command injection in environment-modules bash completion via malicious module names containing shell metacharacters	7.3 High	Sep 15, 2026
CVE-2026-74860	Libxml2: double-free/uaf in libxml2 python bindings	8.5 High	Sep 8, 2026
CVE-2026-86469	Glib2: toctou symlink race in `g_file_create_replace_destination` fallback path	5.3 Medium	Sep 7, 2026
CVE-2026-86332	A flaw was found in odh-dashboard in Red Hat OpenShift AI	6.5 Medium	Sep 7, 2026
CVE-2026-84185	Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification	5.9 Medium	Sep 3, 2026
CVE-2026-84837	Rpm: command injection in `rpmbuild -t*` (`gettarspec`) via unescaped tarball path	7.8 High	Sep 2, 2026
CVE-2026-18743	Popt-devel: popt-static: short realloc in poptconfigfiletostring	2.5 Low	Sep 1, 2026
CVE-2026-82327	Libsolv: libsolv: out-of-bounds write in repo_write() via unvalidated directory id from vertical/paged .solv filelist data	5.5 Medium	Aug 28, 2026
CVE-2026-18393	A flaw was found in FFmpeg	5.4 Medium	Aug 28, 2026
CVE-2026-80179	Jwcrypto: jwcrypto: denial of service via malformed jwe tokens	5.9 Medium	Aug 27, 2026
CVE-2026-78367	Rpm: rpmbuild gettarspec() crafted tar member name → macro injection	7.0 High	Aug 24, 2026
CVE-2026-43961	Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution	7.8 High	Aug 19, 2026
CVE-2026-15218	A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI	7.9 High	Aug 17, 2026
CVE-2026-19548	Binutils: binutils: multiple use-after-free in add_archive_element via lto plugin processing	5.5 Medium	Aug 12, 2026
CVE-2026-18620	A flaw was found in Data Science Pipelines	7.1 High	Aug 10, 2026
CVE-2026-18618	A flaw was found in ml-metadata	7.5 High	Aug 10, 2026
CVE-2026-18611	A flaw was found in the Data Science Pipelines Operator	7.5 High	Aug 10, 2026
CVE-2026-18982	A flaw was found in the RHOAI training-operator	8.8 High	Aug 10, 2026
CVE-2026-18951	A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator	8.8 High	Aug 10, 2026

Other Red Hat products