A privilege assignment flaw (CWE-266) exists in Red Hat OpenShift AI 3.0's TrustyAI component. It creates a role and cluster role binding that grants all authenticated users and service accounts permissions to get, list, and watch pods across all namespaces, and access persistent volume claims and lmevaljobs. This is implemented by binding the role to the system:authenticated group, effectively allowing any user or service account on the cluster to enumerate pods and access certain resources cluster-wide. Red Hat rates this vulnerability as moderate severity due to the limited scope of information exposure. No official fix or patch is currently available, and mitigation options are either unavailable or insufficient per Red Hat Product Security standards.

The vulnerability allows any authenticated user or service account on the cluster to list and watch pods in any namespace, and access persistent volume claims and lmevaljobs. This could lead to unauthorized information disclosure about cluster workloads and storage resources. However, integrity and availability impacts are not present. Red Hat classifies the impact as moderate due to the limited scope of exposed information.

Currently, no official fix or patch is available for this vulnerability. Red Hat states that mitigation options are either not available or do not meet their criteria for ease of use, deployment, applicability, or stability. Users should monitor Red Hat advisories for updates and follow official upgrade instructions when a fix becomes available. Consulting with Red Hat Technical Account Managers may provide additional guidance.