CVE-2026-18608 describes a security flaw in the Data Science Pipelines Operator (DSPO) where the operator's ClusterRole includes excessive privileges such as executing commands inside pods and managing cluster-wide roles. This over-privileging violates the principle of least privilege and could allow an attacker who compromises the DSPO pod to escalate privileges and gain full administrative control over the Kubernetes cluster. The vulnerability is rated high severity with a CVSS 3.1 score of 8.7 (AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N). Red Hat's advisories for Red Hat OpenShift AI mention this CVE among others and provide updated container images and instructions for upgrading the cluster. However, the advisories do not explicitly confirm a patch or fix specifically for this CVE at this time, advising users to follow upgrade documentation for full remediation.

If exploited, this vulnerability could allow an attacker who gains control of the DSPO pod to leverage its excessive permissions to execute arbitrary commands within pods and manage cluster-wide roles, effectively gaining full administrative control over the entire Kubernetes cluster. This could lead to complete compromise of cluster resources and data confidentiality and integrity loss. The CVSS score of 8.7 indicates a high impact on confidentiality and integrity with no impact on availability.

Red Hat has issued security advisories for Red Hat OpenShift AI that include this vulnerability and recommends upgrading to the latest available versions following their official documentation. Although no explicit patch or fix is stated for CVE-2026-18608 alone, users should apply the updated images and follow Red Hat's upgrade instructions to mitigate the risk. Patch status is not yet confirmed explicitly for this CVE; therefore, users should monitor Red Hat advisories and apply updates as they become available.