CVE-2026-15044: Vulnerability in Red Hat Red Hat OpenShift AI (RHOAI)
A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security setting is not enabled, these services can expose their communication channels without requiring users to prove their identity. This allows any other program within the cluster to access the AI guardrails and orchestrator without proper authorization. An attacker could exploit this to gain unauthorized access to sensitive information and potentially make limited changes to the AI models.
AI Analysis
Technical Summary
CVE-2026-15044 describes a security flaw in the TrustyAI Service Operator used in Red Hat OpenShift AI (RHOAI). When deploying certain AI-related services like gorch or NemoGuardrails, if a particular security setting is not enabled, the communication channels of these services are exposed without requiring user authentication. This exposure allows any other program running within the same cluster to access the AI guardrails and orchestrator components without proper authorization. An attacker exploiting this vulnerability could gain unauthorized access to sensitive information and potentially make limited changes to AI models. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS v3.1 vector is AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N, reflecting a medium severity impact with high confidentiality impact, low integrity impact, and no availability impact. The vendor advisory does not currently specify a patch or remediation level.
Potential Impact
Exploitation of this vulnerability allows unauthorized programs within the same cluster to access sensitive AI guardrails and orchestrator communication channels without authentication. This can lead to unauthorized disclosure of sensitive information and limited unauthorized modifications to AI models. The impact on confidentiality is high, integrity impact is low, and availability is not affected.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-15044 for current remediation guidance. Until an official fix is available, ensure that the recommended security setting for TrustyAI Service Operator deployments is enabled to prevent unauthorized access. Follow vendor instructions carefully once provided.
CVE-2026-15044: Vulnerability in Red Hat Red Hat OpenShift AI (RHOAI)
Description
A flaw was found in the TrustyAI Service Operator. When deploying services like gorch or NemoGuardrails, if a specific security setting is not enabled, these services can expose their communication channels without requiring users to prove their identity. This allows any other program within the cluster to access the AI guardrails and orchestrator without proper authorization. An attacker could exploit this to gain unauthorized access to sensitive information and potentially make limited changes to the AI models.
CVSS v3.1
Score 6.3medium
Weaknesses
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
CVE-2026-15044 describes a security flaw in the TrustyAI Service Operator used in Red Hat OpenShift AI (RHOAI). When deploying certain AI-related services like gorch or NemoGuardrails, if a particular security setting is not enabled, the communication channels of these services are exposed without requiring user authentication. This exposure allows any other program running within the same cluster to access the AI guardrails and orchestrator components without proper authorization. An attacker exploiting this vulnerability could gain unauthorized access to sensitive information and potentially make limited changes to AI models. The vulnerability is classified under CWE-200 (Exposure of Sensitive Information). The CVSS v3.1 vector is AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N, reflecting a medium severity impact with high confidentiality impact, low integrity impact, and no availability impact. The vendor advisory does not currently specify a patch or remediation level.
Potential Impact
Exploitation of this vulnerability allows unauthorized programs within the same cluster to access sensitive AI guardrails and orchestrator communication channels without authentication. This can lead to unauthorized disclosure of sensitive information and limited unauthorized modifications to AI models. The impact on confidentiality is high, integrity impact is low, and availability is not affected.
Mitigation Recommendations
Patch status is not yet confirmed — check the Red Hat advisory at https://access.redhat.com/security/cve/CVE-2026-15044 for current remediation guidance. Until an official fix is available, ensure that the recommended security setting for TrustyAI Service Operator deployments is enabled to prevent unauthorized access. Follow vendor instructions carefully once provided.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-07-08T12:13:56.870Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-15044","vendor":"Red Hat"}]
Threat ID: 6a4e65c0c9d9e3dbe34c9ac4
Added to database: 07/08/2026, 14:59:12 UTC
Last enriched: 07/16/2026, 09:34:27 UTC
Last updated: 08/22/2026, 22:52:11 UTC
Views: 93
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.