Threats Tagged 'cve-2026-16745'

The cert-manager Operator for Red Hat OpenShift builds on top of Kubernetes, introducing certificate authorities and certificates as first-class resource types in the Kubernetes API. This makes it possible to provide certificates-as-a-service to developers working within your Kubernetes cluster.

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

A Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2026-15154) exists in the guardrails-detectors component of Red Hat OpenShift AI. This flaw allows remote attackers to send specially crafted regular expressions to the public detection API, causing catastrophic backtracking and resulting in a worker process consuming 100% CPU indefinitely. This leads to denial of service for the guardrails-mediated large language model pipeline. The vulnerability affects specific versions of Red Hat OpenShift AI and has a medium severity rating with a CVSS score of 6.5. Red Hat has released updated images and version 2.25.10 to address this issue.

Red Hat OpenShift AI versions 3.4.0 up to but not including 3.4.3 contain multiple critical security vulnerabilities, including CVE-2026-13717 and others. Red Hat has released version 3.4.3 with updated images to address these issues. Users are strongly advised to upgrade their clusters following Red Hat's official documentation to mitigate these vulnerabilities. No detailed technical or exploit information is provided in the advisory.

A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI). Due to incorrect network binding, a malicious actor within the cluster can bypass authentication and impersonate any user by providing an arbitrary access token. This allows an attacker to gain unauthorized access to the Kubernetes API, potentially leading to arbitrary code execution, privilege escalation, or information disclosure.

A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI). Due to incorrect network binding, a malicious actor within the cluster can bypass authentication and impersonate any user by providing an arbitrary access token. This allows an attacker to gain unauthorized access to the Kubernetes API, potentially leading to arbitrary code execution, privilege escalation, or information disclosure.

Release of RHOAI 2.25.6 provides these changes:

Python is an interpreted, interactive, object-oriented programming language, which includes modules, classes, exceptions, very high level dynamic data types and dynamic typing. Python supports interfaces to many system calls and libraries, as well as to various windowing systems. Security Fix(es): * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Collector with the supported components for a Red Hat build of OpenTelemetry Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.

Release of RHOAI 2.25.11 provides these changes: