A flaw was found in the file_type content detector of guardrails-detectors. (CVE-2026-15143)

CVE-2026-15143 is a critical security flaw in the file_type content detector component of guardrails-detectors. The vulnerability arises because the system processes attacker-supplied XML Schema Definition (XSD) strings without adequate restrictions. This improper handling enables attackers to induce server-side requests to arbitrary external URLs or read local files on the server. The consequence is potential disclosure of sensitive data, including cloud provider credentials and access to internal network services. The CVSS v3.1 score is 9.3, reflecting high impact on confidentiality with no required privileges or user interaction. According to the Red Hat advisory, this issue affects Red Hat OpenShift AI, with updated images available in version 3.4.5 to address the problem.

Successful exploitation can lead to sensitive information disclosure, including cloud provider credentials and internal network service access. The vulnerability allows remote attackers to cause server-side requests or local file reads, compromising confidentiality. The CVSS score of 9.3 indicates critical severity with high confidentiality impact and low attack complexity.

A fix is available in Red Hat OpenShift AI version 3.4.5. Users should upgrade to this version following the vendor's official upgrade instructions to fully apply the errata update. No additional mitigation steps are indicated by the vendor advisory.