The vulnerability involves incorrect privilege assignment (CWE-266) in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted overly permissive cluster-wide roles. Exploitation requires prior compromise of a pod or the ability to create pods in the relevant namespaces. Successful exploitation can lead to privilege escalation to cluster-admin level or disclosure of sensitive cluster-wide secrets. The CVSS v3.1 score is 7.9 (High), reflecting network attack vector, high attack complexity, high privileges required, no user interaction, changed scope, and high confidentiality and integrity impact with low availability impact. No explicit affected versions or patch information is provided in the advisory. Red Hat is the authoritative source for this vulnerability.

If exploited, an attacker can gain full cluster administrator privileges in Red Hat OpenShift AI by abusing excessive permissions assigned to specific ServiceAccounts. This includes the ability to create new ClusterRoleBindings and access all secrets across the cluster. The attack requires a prior compromise of a pod or the ability to create pods in the affected namespaces, making the initial exploitation scenario more complex. The impact includes high confidentiality and integrity loss with low availability impact.

The vendor advisory does not explicitly state that a fix is currently available. Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-15218 for current remediation guidance. Mitigation involves restricting the permissions granted to the maas-api and maas-controller ServiceAccounts to the minimum necessary. Additionally, preventing unauthorized pod creation in the affected namespaces reduces exploitation risk. Monitor Red Hat communications for updates on official fixes or workarounds.