Red Hat Openshift Ai Rhoai vulnerabilities

79 CVEs affecting Red Hat Openshift Ai Rhoai, 0 known to be exploited (CISA KEV), with EPSS scores. Latest: CVE-2026-108334, published 2026-10-15.

Highest priority

Known exploited (CISA KEV) first, then by EPSS exploit probability.

CVE-2026-23536, published 2026-03-20. High severity, CVSS 7.5. EPSS: 2.4% chance of exploitation in the next 30 days. A security issue was discovered in the Feast Feature Server's `/read-document` endpoint that allows an unauthenticated remote attacker to read any file accessible to the server process. By sending a…
CVE-2026-2033, published 2026-02-20. High severity, CVSS 7.3. EPSS: 1.7% chance of exploitation in the next 30 days. MLflow Tracking Server Artifact Handler Directory Traversal Remote Code Execution Vulnerability. This vulnerability allows remote attackers to execute arbitrary code on affected installations of…
CVE-2026-23869, published 2026-04-08. High severity, CVSS 7.5. EPSS: 1.6% chance of exploitation in the next 30 days. A denial of service vulnerability exists in React Server Components, affecting the following packages: react-server-dom-parcel, react-server-dom-turbopack and react-server-dom-webpack (versions…
CVE-2026-56121, published 2026-06-24. Critical severity, CVSS 9.8. EPSS: 1.4% chance of exploitation in the next 30 days. Feast before 0.63.0 contains an unsafe deserialization vulnerability that allows unauthenticated or unauthorized attackers to achieve remote code execution by sending a crafted gRPC request to the…
CVE-2026-2635, published 2026-02-20. High severity, CVSS 7.3. EPSS: 1.2% chance of exploitation in the next 30 days. MLflow Use of Default Password Authentication Bypass Vulnerability. This vulnerability allows remote attackers to bypass authentication on affected installations of MLflow. Authentication is not…
CVE-2026-1615, published 2026-02-09. Critical severity, CVSS 9.8. EPSS: 1.2% chance of exploitation in the next 30 days. Versions of the package jsonpath before 1.3.0 are vulnerable to Arbitrary Code Injection via unsafe evaluation of user-supplied JSON Path expressions. The library relies on the static-eval module to…
CVE-2026-44724, published 2026-05-27. High severity, CVSS 7.8. EPSS: 1.2% chance of exploitation in the next 30 days. systeminformation is a System and OS information library for node.js. From 4.17.0 to 5.31.5, on Linux, systeminformation is vulnerable to command injection in networkInterfaces() when an active…
CVE-2024-11831, published 2025-02-10. Medium severity, CVSS 5.4. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in npm-serialize-javascript. The vulnerability occurs because the serialize-javascript module does not properly sanitize certain inputs, such as regex or other JavaScript object…
CVE-2026-18948, published 2026-08-10. Critical severity, CVSS 9.9. EPSS: 1.1% chance of exploitation in the next 30 days. A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to…
CVE-2026-31228, published 2026-05-12. Critical severity, CVSS 9.8. EPSS: 1.1% chance of exploitation in the next 30 days. The Adversarial Robustness Toolbox (ART) thru 1.20.1 contains a remote code execution vulnerability in its Kubeflow component. The robustness evaluation function for PyTorch models uses the unsafe…

Latest

CVE-2026-108334, published 2026-10-15. High severity, CVSS 7.4. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should…
CVE-2026-87743, published 2026-09-18. High severity, CVSS 7.5. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in Quarkus HTTP security. An unauthenticated attacker can exploit a discrepancy in how paths are normalized between the security matcher and HTTP request dispatchers. This allows the…
CVE-2026-92091, published 2026-09-16. Medium severity, CVSS 5.9. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in jwcrypto. The JWK.import_key() function validates the key_ops JWK member for duplicate values using an algorithm with O(n^2) time complexity, and the length of key_ops is not…
CVE-2026-86332, published 2026-09-07. Medium severity, CVSS 6.5. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns…
CVE-2026-84185, published 2026-09-03. Medium severity, CVSS 5.9. EPSS: 0.1% chance of exploitation in the next 30 days. A flaw was found in the jwcrypto library, which is used for implementing Javascript Object Signing and Encryption (JOSE) standards. The issue occurs when the library verifies a General JSON…
CVE-2026-18393, published 2026-08-28. Medium severity, CVSS 5.4. EPSS: 0.3% chance of exploitation in the next 30 days. A flaw was found in FFmpeg. The tdsc_load_cursor() function writes beyond the bounds of a heap-allocated buffer when processing crafted TDSC cursor data. A remote attacker could exploit this by…
CVE-2026-80179, published 2026-08-28. Medium severity, CVSS 5.9. EPSS: 0.4% chance of exploitation in the next 30 days. A flaw was found in jwcrypto. A remote attacker can send a specially crafted JSON Web Encryption (JWE) token containing numerous period delimiters. This malformed token can force the…
CVE-2026-15218, published 2026-08-17. High severity, CVSS 7.9. EPSS: 0.7% chance of exploitation in the next 30 days. A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational…
CVE-2026-18950, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.5% chance of exploitation in the next 30 days. A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the `roleRef`…
CVE-2026-18949, published 2026-08-10. High severity, CVSS 8.8. EPSS: 0.6% chance of exploitation in the next 30 days. A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This…