Red Hat Openshift Ai 3.3 vulnerabilities

28 CVEs affecting Red Hat Openshift Ai 3.3, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18982, published 2026-08-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-18948, published 2026-08-10. Critical severity, CVSS 9.9. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to…
CVE-2026-28356, published 2026-03-12. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. multipart is a fast multipart/form-data parser for python. Prior to 1.2.2, 1.3.1 and 1.4.0-dev, the parse_options_header() function in multipart.py uses a regular expression with an ambiguous…
CVE-2026-31812, published 2026-03-10. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. Quinn is a pure-Rust, async-compatible implementation of the IETF QUIC transport protocol. Prior to 0.11.14, a remote, unauthenticated attacker can trigger a denial of service in applications using…
CVE-2026-18951, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit…
CVE-2026-56211, published 2026-06-19. High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days. A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control…
CVE-2026-42561, published 2026-05-13. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. Python-Multipart is a streaming multipart parser for Python. Prior to 0.0.27, python-multipart has a denial of service vulnerability in multipart part header parsing. When parsing…
CVE-2026-18941, published 2026-08-10. High severity, CVSS 7.7. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. This default allows…
CVE-2026-18618, published 2026-08-10. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service (DoS) issues. An in-cluster attacker, with network…
CVE-2026-18982, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in any Kubernetes namespace to escalate their privileges. Through the creation of…
CVE-2026-18617, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the spec.database.customExtraParams field, which allows for the injection of…

Latest

CVE-2026-18950, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the `roleRef`…
CVE-2026-18949, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This…
CVE-2026-18947, published 2026-08-10. High severity, CVSS 8.5. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in Feast. An authorization bypass vulnerability exists in the /materialize and /materialize-incremental endpoints. By sending a specially crafted request that omits the feature_views…
CVE-2026-18621, published 2026-08-10. High severity, CVSS 7.6. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This…
CVE-2026-18620, published 2026-08-10. High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged…