Threats Tagged 'cve-2026-13717'

Release of RHOAI 3.4.4 provides these changes:

Red Hat OpenShift AI version 3.4.3 addresses multiple security issues identified by CVE-2026-13717 and others. The advisory announces updated images for Red Hat OpenShift AI to mitigate these vulnerabilities. The update is critical and users are advised to upgrade their clusters following Red Hat's official documentation. No specific technical details or exploit information are provided in the advisory.

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.

The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.