Red Hat Openshift Ai 3.4 vulnerabilities

49 CVEs affecting Red Hat Openshift Ai 3.4, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-15218, published 2026-08-17.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-56121, published 2026-06-24. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the…
CVE-2026-44724, published 2026-05-27. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces() when an active…
CVE-2026-33846, published 2026-05-04. High severity, CVSS 7.5. EPSS: 1.1% chance of exploitation in the next 30 days. A heap buffer overflow vulnerability exists in the DTLS handshake fragment reassembly logic of GnuTLS. The issue arises in merge_handshake_packet() where incoming handshake fragments are matched and…
CVE-2026-18948, published 2026-08-10. Critical severity, CVSS 9.9. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to…
CVE-2026-5260, published 2026-05-26. High severity, CVSS 8.2. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in libgnutls. A remote attacker, by sending an extremely short premaster secret during an RSA key exchange to a server using an RSA key backed by a PKCS#11 token, could trigger a…
CVE-2026-42015, published 2026-05-26. Medium severity, CVSS 5.3. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in gnutls. An off-by-one error exists in the PKCS#12 bag element bounds check. This vulnerability allows an remote attacker to write past the internal array of a PKCS#12 bag when…
CVE-2026-18951, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit…
CVE-2026-41673, published 2026-05-07. High severity, CVSS 7.5. EPSS: 0.9% chance of exploitation in the next 30 days. xmldom is a pure JavaScript W3C standard-based (XML DOM Level 2 Core) `DOMParser` and `XMLSerializer` module. In @xmldom/xmldom prior to versions 0.9.10 and 0.8.13 and xmldom version 0.6.0 and prior,…
CVE-2026-56211, published 2026-06-19. High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days. A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control…
CVE-2026-45292, published 2026-05-28. Medium severity, CVSS 5.3. EPSS: 0.8% chance of exploitation in the next 30 days. opentelemetry-java is the Java implementation of the OpenTelemetry API for recording telemetry, and SDK for managing telemetry recorded by the API. Prior to 1.62.0, a vulnerability affects the…

Latest

CVE-2026-15218, published 2026-08-17. High severity, CVSS 7.9. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational…
CVE-2026-18982, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in any Kubernetes namespace to escalate their privileges. Through the creation of…
CVE-2026-18950, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the `roleRef`…
CVE-2026-18949, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This…
CVE-2026-18942, published 2026-08-10. Medium severity, CVSS 5.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the Feast operator. A malicious tenant could inject arbitrary code into their feature repository. This code would be executed by an automated process with elevated privileges,…
CVE-2026-18941, published 2026-08-10. High severity, CVSS 7.7. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in Feast and feast-operator. The default configuration for both the Feast SDK and the feast-operator is "no_auth," meaning no security manager is installed. This default allows…
CVE-2026-18621, published 2026-08-10. High severity, CVSS 7.6. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This…
CVE-2026-18620, published 2026-08-10. High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged…