CVE-2026-15467: Incorrect Privilege Assignment in Red Hat Red Hat OpenShift AI 2.25
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.
AI Analysis
Technical Summary
This vulnerability affects the trustyai-service-operator's LMEvalJob controller component, where an authenticated cluster user can exploit a flaw by configuring a sidecar container to bypass security policies. This bypass enables the execution of untrusted remote code, resulting in arbitrary code execution within the cluster environment. The CVSS v3.1 score is 8.1, indicating high severity with network attack vector, low attack complexity, and requiring low privileges but no user interaction. The vulnerability impacts confidentiality and integrity but not availability. The flaw is categorized under CWE-266, which relates to improper access control. Vendor advisories from Red Hat indicate that updated images for Red Hat OpenShift AI are available to address this and related vulnerabilities.
Potential Impact
An authenticated user inside the cluster can bypass security policies to execute arbitrary code remotely, compromising confidentiality and integrity of the cluster environment. This could allow unauthorized code execution with potential to impact cluster operations or data confidentiality. Availability impact is not indicated.
Mitigation Recommendations
Red Hat has released updated images for Red Hat OpenShift AI (versions 2.25.10 and 3.4.3) that address this vulnerability. Users should upgrade their clusters following the official Red Hat OpenShift AI upgrade documentation to fully apply the errata update. No other temporary or workaround fixes are indicated. Patch status is confirmed by vendor advisories; remediation is available via official updates.
CVE-2026-15467: Incorrect Privilege Assignment in Red Hat Red Hat OpenShift AI 2.25
Description
A flaw was found in the trustyai-service-operator's LMEvalJob controller. An authenticated user within the cluster can exploit this vulnerability by configuring a sidecar container to bypass existing security policies. This allows the user to enable and execute untrusted remote code, leading to arbitrary code execution within the cluster.
CVSS v3.1
Score 8.1high
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability affects the trustyai-service-operator's LMEvalJob controller component, where an authenticated cluster user can exploit a flaw by configuring a sidecar container to bypass security policies. This bypass enables the execution of untrusted remote code, resulting in arbitrary code execution within the cluster environment. The CVSS v3.1 score is 8.1, indicating high severity with network attack vector, low attack complexity, and requiring low privileges but no user interaction. The vulnerability impacts confidentiality and integrity but not availability. The flaw is categorized under CWE-266, which relates to improper access control. Vendor advisories from Red Hat indicate that updated images for Red Hat OpenShift AI are available to address this and related vulnerabilities.
Potential Impact
An authenticated user inside the cluster can bypass security policies to execute arbitrary code remotely, compromising confidentiality and integrity of the cluster environment. This could allow unauthorized code execution with potential to impact cluster operations or data confidentiality. Availability impact is not indicated.
Mitigation Recommendations
Red Hat has released updated images for Red Hat OpenShift AI (versions 2.25.10 and 3.4.3) that address this vulnerability. Users should upgrade their clusters following the official Red Hat OpenShift AI upgrade documentation to fully apply the errata update. No other temporary or workaround fixes are indicated. Patch status is confirmed by vendor advisories; remediation is available via official updates.
Technical Details
- Gcve Source
- db.gcve.eu
- Osv Id
- GHSA-qw34-v3jw-3crv
- Osv Schema Version
- 1.4.0
- Aliases
- ["CVE-2026-15467"]
- Ecosystems
- []
- Database Specific Severity
- HIGH
- Cvss Version
- 3.1
Patch Information
Threat ID: 6a7c9b73bf8831d539ce0da5
Added to database: 08/12/2026, 16:12:35 UTC
Last enriched: 08/12/2026, 17:34:11 UTC
Last updated: 08/13/2026, 02:40:59 UTC
Views: 6
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.