Red Hat Openshift Ai 3.5 vulnerabilities

15 CVEs affecting Red Hat Openshift Ai 3.5, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-18982, published 2026-08-10.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-18951, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.9% chance of exploitation in the next 30 days. A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit…
CVE-2026-56211, published 2026-06-19. High severity, CVSS 7.1. EPSS: 0.9% chance of exploitation in the next 30 days. A remote code execution vulnerability was found in libaom, the reference AV1 codec implementation. Insufficient bounds validation in the AV1 encoder's SVC (Scalable Video Coding) layer ID control…
CVE-2026-18618, published 2026-08-10. High severity, CVSS 7.5. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in ml-metadata. The statically-linked gRPC stack in ml-metadata is outdated, making it vulnerable to known HTTP/2 denial of service (DoS) issues. An in-cluster attacker, with network…
CVE-2026-18982, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.8% chance of exploitation in the next 30 days. A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in any Kubernetes namespace to escalate their privileges. Through the creation of…
CVE-2026-18617, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the spec.database.customExtraParams field, which allows for the injection of…
CVE-2026-18608, published 2026-08-10. High severity, CVSS 8.7. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation.…
CVE-2026-56209, published 2026-06-19. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. An arbitrary address write vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows an…
CVE-2026-18611, published 2026-08-10. High severity, CVSS 7.5. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO…
CVE-2026-15467, published 2026-08-10. High severity, CVSS 8.1. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing…
CVE-2026-56210, published 2026-06-19. High severity, CVSS 7.1. EPSS: 0.6% chance of exploitation in the next 30 days. A heap-buffer-overflow read vulnerability was found in libaom, the reference AV1 codec implementation. A missing bounds check in the SVC (Scalable Video Coding) layer ID control function allows…

Latest

CVE-2026-18620, published 2026-08-10. High severity, CVSS 7.1. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged…
CVE-2026-15581, published 2026-08-10. High severity, CVSS 8.0. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. An attacker can…
CVE-2026-15588, published 2026-07-20. Medium severity, CVSS 5.3. EPSS: 0.5% chance of exploitation in the next 30 days. A denial-of-service and resource exhaustion vulnerability exists within the `GDBus` component of GLib. The `gdbusauth` authentication mechanism fails to enforce proper length limitations on data…