Known vulnerabilities in Red Hat OpenShift AI (RHOAI)
Is your version affected?
CVE list
| CVE | Summary | Score | Published |
|---|---|---|---|
| CVE-2026-83495 | Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration | Not rated | Nov 7, 2026 |
| CVE-2026-83494 | Training-operator: pytorchjob validateupdate casts oldjob from newobj, bypassing managedby immutability (asvs v5.1.3; upstream bug) | Not rated | Nov 6, 2026 |
| CVE-2026-83493 | Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@master | Not rated | Nov 6, 2026 |
| CVE-2026-107912 | Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw | 7.7 High | Nov 5, 2026 |
| CVE-2026-120194 | Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step | 7.5 High | Oct 31, 2026 |
| CVE-2026-115456 | Gcc: out-of-bounds read in std::from_chars | 3.7 Low | Oct 30, 2026 |
| CVE-2026-114691 | Gcc: integer wrap in `std | 5.9 Medium | Oct 30, 2026 |
| CVE-2026-114690 | Gcc: confirmed out-of-bounds read/write in libstdc++ parallel `std | 6.2 Medium | Oct 30, 2026 |
| CVE-2026-117574 | A flaw was found in ai-gateway-payload-processing | 9.1 Critical | Oct 28, 2026 |
| CVE-2026-13451 | A flaw was found in KServe | 7.7 High | Oct 28, 2026 |
| CVE-2026-114406 | Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns | 6.8 Medium | Oct 21, 2026 |
| CVE-2026-114236 | Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers | 3.3 Low | Oct 21, 2026 |
| CVE-2026-17557 | A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI | 6.5 Medium | Oct 21, 2026 |
| CVE-2026-92824 | Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-92822 | Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-92823 | Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml | 6.2 Medium | Oct 21, 2026 |
| CVE-2026-17591 | Libarchive: libarchive: use-after-free via aliased mac metadata copy | 3.6 Low | Oct 16, 2026 |
| CVE-2026-85977 | Libtirpc: libtirpc: denial of service via unbounded memory allocation during portmapper response decoding | 5.3 Medium | Oct 16, 2026 |
| CVE-2026-85231 | Libtirpc: libtirpc: denial of service via unbounded memory allocation during rpcsec_gss decoding | 6.5 Medium | Oct 16, 2026 |
| CVE-2026-108334 | Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway policy overrides | 7.4 High | Oct 15, 2026 |
| CVE-2026-107161 | Cyrus-sasl: heap buffer overflow in cyrus-sasl add_to_challenge() allows malicious server to crash or compromise digest-md5 clients | 7.5 High | Oct 7, 2026 |
| CVE-2026-103242 | Rpm: heap-based buffer overflow write in hex2binv() via a mistyped rpmtag_filesignatures header tag | 7.1 High | Sep 30, 2026 |
| CVE-2026-95520 | Rpm: rpm: integer overflow in iterreadarchivenext() leads to heap-based buffer overflow when parsing untrusted rpm packages | 7.1 High | Sep 29, 2026 |
| CVE-2026-102010 | Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if | 7.0 High | Sep 28, 2026 |
| CVE-2026-95521 | Rpm: rpm: shell command injection via macro expansion of source/spec file basenames when installing a source rpm | 7.8 High | Sep 24, 2026 |
Other Red Hat products
Red Hat Enterprise Linux 9 1867
Red Hat Enterprise Linux 8 1841
Red Hat Enterprise Linux 7 1502
Red Hat Enterprise Linux 10 1457
Red Hat Enterprise Linux 6 1340
Red Hat OpenShift Container Platform 4 631
Red Hat Enterprise Linux 9.6 Extended Update Support 504
Red Hat Enterprise Linux 9.2 Update Services for SAP Solutions 475
Red Hat Enterprise Linux 8.4 Advanced Mission Critical Update Support 473
Red Hat Enterprise Linux 10.0 Extended Update Support 461
Red Hat Enterprise Linux 8.6 Advanced Mission Critical Update Support 451
Red Hat Enterprise Linux 8.8 Update Services for SAP Solutions 433