Red Hat Security Advisory: RHOAI 3.2 - Red Hat OpenShift AI

The Red Hat Security Advisory RHSA-2026:1027 announces the release of Red Hat OpenShift AI 3.2, which includes updates addressing two CVEs: CVE-2025-62593 and CVE-2025-66418. The advisory does not specify detailed technical information or fixes but references updated container images and documentation for upgrading clusters. The vulnerabilities involve issues related to code generation control, resource allocation limits, and CSRF. No known exploits are reported in the wild. The advisory emphasizes following the official upgrade documentation to apply the update properly.

The vulnerabilities affect Red Hat OpenShift AI versions starting from 3.2 and earlier versions below 2.52.0, potentially allowing attackers to exploit improper code generation, resource allocation without limits, and cross-site request forgery weaknesses. The exact impact is not detailed, but the severity is classified as high by Red Hat. There are no known active exploits in the wild at this time.

Red Hat has released updated images for Red Hat OpenShift AI 3.2. Users should follow the official Red Hat OpenShift AI upgrade documentation to upgrade their clusters and fully apply the errata update. No additional mitigation steps are indicated beyond applying the official update. Patch status is confirmed by the availability of updated images and official upgrade instructions.