Threats Tagged 'cve-2026-18620'

Release of RHOAI 2.25.11 provides these changes:

Release of RHOAI 3.4.4 provides these changes:

A path traversal and arbitrary file overwrite vulnerability exists in Argo Workflows used within Red Hat OpenShift AI. This flaw allows an attacker with workflow submission privileges to submit a malicious archive containing symbolic links that bypass extraction directory restrictions, leading to overwriting files inside the workflow pod. Successful exploitation can result in arbitrary command execution during pod startup. The impact is limited to the compromised pod and does not extend to host-level compromise. No official fix or mitigation currently meets Red Hat's standards for deployment or stability.

Red Hat OpenShift AI version 3.4.3 addresses multiple security issues identified by CVE-2026-13717 and others. The advisory announces updated images for Red Hat OpenShift AI to mitigate these vulnerabilities. The update is critical and users are advised to upgrade their clusters following Red Hat's official documentation. No specific technical details or exploit information are provided in the advisory.

A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged ServiceAccount (SA) during a CreateRun request, an attacker can bypass authorization checks. This allows the tenant to run their containers with elevated privileges, potentially leading to the disclosure of sensitive information (secrets) and the ability to execute commands within other users' pods.

A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged ServiceAccount (SA) during a CreateRun request, an attacker can bypass authorization checks. This allows the tenant to run their containers with elevated privileges, potentially leading to the disclosure of sensitive information (secrets) and the ability to execute commands within other users' pods.

A Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2026-15154) was found in guardrails-detectors, a component of Red Hat OpenShift AI. This flaw allows a remote attacker to send specially crafted regular expressions to the public detection API, causing catastrophic backtracking. The result is a worker process consuming 100% CPU indefinitely, leading to denial of service for the guardrails-mediated large language model (LLM) pipeline. The vulnerability affects specific versions of Red Hat OpenShift AI and has a medium severity rating with a CVSS score of 6.5. Updated images and a fixed version 2.25.10 are available from Red Hat to address this issue.

Release of RHOAI 2.25.6 provides these changes:

The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21

Collector with the supported components for a Red Hat build of OpenTelemetry Security Fix(es): * crypto/x509: golang: Denial of Service due to excessive resource consumption via crafted certificate (CVE-2025-61729) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.