This vulnerability (CVE-2026-42271) concerns Red Hat OpenShift AI and is classified under CWE-78 (Improper Neutralization of Special Elements used in an OS Command). The Red Hat advisory RHSA-2026:27784 announces the release of RHOAI 3.4.1 with updated images to address this issue. The CVSS vector indicates a network attack vector with low attack complexity, requiring privileges and partial user interaction, and high impact on confidentiality, integrity, and availability. However, the advisory does not explicitly state the exact remediation steps or patches but references updated images and documentation for upgrading the cluster. No known exploits have been reported.

Successful exploitation could allow an attacker with some privileges to execute OS commands, potentially leading to a full compromise of confidentiality, integrity, and availability of the affected system. The CVSS vector suggests high impact on all security properties. However, no known exploits are currently reported in the wild.

Red Hat has released updated images in RHOAI 3.4.1 to address this vulnerability. Users should follow the official Red Hat OpenShift AI upgrade documentation to apply this errata update fully. Since this is not a cloud service, remediation is managed by the user applying the updated images and following the upgrade instructions provided by Red Hat. Patch status is not explicitly confirmed as a traditional patch but is implied through updated images and version 3.4.1. Users should monitor Red Hat's official documentation and advisories for detailed upgrade instructions and apply them promptly.