CVE-2026-18949: Execution with Unnecessary Privileges in Red Hat Red Hat OpenShift AI 2.25
A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-administrator level, gain access to sensitive data like credentials and keys across the entire cluster, and disrupt multi-tenant isolation.
AI Analysis
Technical Summary
This vulnerability in Red Hat OpenShift AI (RHOAI) involves the odh-dashboard's Service Account having excessive cluster-wide permissions via its ClusterRole. An attacker who compromises the dashboard's Service Account token can exploit these permissions to escalate privileges to cluster-admin level, read and delete sensitive secrets, create ClusterRoleBindings, and break multi-tenant isolation. The issue is due to the ClusterRole granting broad CRUD permissions on secrets and RBAC management resources. The vulnerability is present in deployments with the dashboard component enabled. Red Hat has not yet provided an official fix but recommends mitigations to limit the risk.
Potential Impact
An attacker with access to the odh-dashboard Service Account token can escalate privileges to full cluster-administrator level, gaining access to sensitive data such as credentials and keys across the entire cluster. This compromises confidentiality, integrity, and availability of cluster resources and disrupts multi-tenant isolation, potentially allowing unauthorized control and denial of service within the cluster.
Mitigation Recommendations
No official patch or fix is currently confirmed. Red Hat advises restricting access to the opendatahub namespace to reduce the risk of dashboard pod compromise. Implement egress NetworkPolicy rules to control outbound traffic from the dashboard. Configure audit log alerting to detect unexpected creation of ClusterRoleBindings. These mitigations help reduce exposure until an official fix is released. Monitor the Red Hat advisory for updates on patch availability.
CVE-2026-18949: Execution with Unnecessary Privileges in Red Hat Red Hat OpenShift AI 2.25
Description
A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-administrator level, gain access to sensitive data like credentials and keys across the entire cluster, and disrupt multi-tenant isolation.
CVSS v3.1
Score 8.8high
Affected software
Red Hat
Red Hat OpenShift AI 2.25
Red Hat
Red Hat OpenShift AI 3.3
Red Hat
Red Hat OpenShift AI 3.4
Red Hat
Red Hat OpenShift AI (RHOAI)
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
This vulnerability in Red Hat OpenShift AI (RHOAI) involves the odh-dashboard's Service Account having excessive cluster-wide permissions via its ClusterRole. An attacker who compromises the dashboard's Service Account token can exploit these permissions to escalate privileges to cluster-admin level, read and delete sensitive secrets, create ClusterRoleBindings, and break multi-tenant isolation. The issue is due to the ClusterRole granting broad CRUD permissions on secrets and RBAC management resources. The vulnerability is present in deployments with the dashboard component enabled. Red Hat has not yet provided an official fix but recommends mitigations to limit the risk.
Potential Impact
An attacker with access to the odh-dashboard Service Account token can escalate privileges to full cluster-administrator level, gaining access to sensitive data such as credentials and keys across the entire cluster. This compromises confidentiality, integrity, and availability of cluster resources and disrupts multi-tenant isolation, potentially allowing unauthorized control and denial of service within the cluster.
Mitigation Recommendations
No official patch or fix is currently confirmed. Red Hat advises restricting access to the opendatahub namespace to reduce the risk of dashboard pod compromise. Implement egress NetworkPolicy rules to control outbound traffic from the dashboard. Configure audit log alerting to detect unexpected creation of ClusterRoleBindings. These mitigations help reduce exposure until an official fix is released. Monitor the Red Hat advisory for updates on patch availability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-08-05T13:39:50.738Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-18949","vendor":"Red Hat"}]
Threat ID: 6a7a3b16bf8831d53985668e
Added to database: 08/10/2026, 20:56:54 UTC
Last enriched: 08/10/2026, 21:12:05 UTC
Last updated: 09/24/2026, 01:47:41 UTC
Views: 50
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.