CVE-2026-86332: Missing Authorization in Red Hat Red Hat OpenShift AI (RHOAI)
A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).
AI Analysis
Technical Summary
The vulnerability exists in the backend-for-frontend route GET /api/nim-serving/:nimResource of the odh-dashboard in Red Hat OpenShift AI. This route uses the dashboard service account to read Kubernetes Secrets and returns the full Secret object including the .data field without performing authorization checks. Consequently, any authenticated dashboard user can retrieve cluster-global NVIDIA NGC API key and NIM image pull secrets. The flaw is categorized as missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). This issue is distinct from other related CVEs affecting the same component. Exploitation requires a logged-in dashboard session and a configured NIM Account. The vulnerability has a CVSS 3.1 base score of 6.5 with high confidentiality impact but no integrity or availability impact.
Potential Impact
An authenticated non-admin user of the OpenShift AI dashboard can read highly sensitive cluster-wide NVIDIA NGC and NIM credentials, potentially leading to unauthorized access to these shared infrastructure secrets. There is no reported impact on data integrity or system availability. Exploitation requires valid dashboard authentication and a configured NIM Account. The exposed credentials could be used to access or pull container images or services relying on these secrets.
Mitigation Recommendations
Currently, no official patch or fix is available. Until a patched dashboard image is released, Red Hat recommends disabling or removing the NVIDIA NIM integration to prevent the presence of the NIM Account Custom Resource and associated Secrets. Additionally, restrict access to the OpenShift AI dashboard to trusted administrators if NIM credentials must remain configured. Monitor the Red Hat advisory for updates on patch availability.
CVE-2026-86332: Missing Authorization in Red Hat Red Hat OpenShift AI (RHOAI)
Description
A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).
CVSS v3.1
Score 6.5medium
AI-Powered Analysis
Machine-generated threat intelligence
Technical Analysis
The vulnerability exists in the backend-for-frontend route GET /api/nim-serving/:nimResource of the odh-dashboard in Red Hat OpenShift AI. This route uses the dashboard service account to read Kubernetes Secrets and returns the full Secret object including the .data field without performing authorization checks. Consequently, any authenticated dashboard user can retrieve cluster-global NVIDIA NGC API key and NIM image pull secrets. The flaw is categorized as missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). This issue is distinct from other related CVEs affecting the same component. Exploitation requires a logged-in dashboard session and a configured NIM Account. The vulnerability has a CVSS 3.1 base score of 6.5 with high confidentiality impact but no integrity or availability impact.
Potential Impact
An authenticated non-admin user of the OpenShift AI dashboard can read highly sensitive cluster-wide NVIDIA NGC and NIM credentials, potentially leading to unauthorized access to these shared infrastructure secrets. There is no reported impact on data integrity or system availability. Exploitation requires valid dashboard authentication and a configured NIM Account. The exposed credentials could be used to access or pull container images or services relying on these secrets.
Mitigation Recommendations
Currently, no official patch or fix is available. Until a patched dashboard image is released, Red Hat recommends disabling or removing the NVIDIA NIM integration to prevent the presence of the NIM Account Custom Resource and associated Secrets. Additionally, restrict access to the OpenShift AI dashboard to trusted administrators if NIM credentials must remain configured. Monitor the Red Hat advisory for updates on patch availability.
Technical Details
- Data Version
- 5.2
- Assigner Short Name
- redhat
- Date Reserved
- 2026-09-07T07:45:39.943Z
- Cvss Version
- 3.1
- State
- PUBLISHED
- Remediation Level
- null
- Vendor Advisory Urls
- [{"url":"https://access.redhat.com/security/cve/CVE-2026-86332","vendor":"Red Hat"}]
Threat ID: 6a9e7b6facd9273b494499cc
Added to database: 09/07/2026, 08:53:03 UTC
Last enriched: 09/07/2026, 09:08:14 UTC
Last updated: 09/07/2026, 09:37:40 UTC
Views: 4
Community Reviews
0 reviewsCrowdsource mitigation strategies, share intel context, and vote on the most helpful responses. Sign in to add your voice and help keep defenders ahead.
Want to contribute mitigation steps or threat intel context? Sign in or create an account to join the community discussion.
Actions
Updates to AI analysis require Pro Console access. Upgrade inside Console → Billing.
Need more coverage?
Upgrade to Pro Console for AI refresh and higher limits.
For incident response and remediation, OffSeq services can help resolve threats faster.
Latest Threats
Check if your credentials are on the dark web
Instant breach scanning across billions of leaked records. Free tier available.