Threats Tagged 'cve-2026-18948'

Release of RHOAI 3.4.4 provides these changes:

Red Hat OpenShift AI version 3.4.3 addresses multiple security issues identified by CVE-2026-13717 and others. The advisory announces updated images for Red Hat OpenShift AI to mitigate these vulnerabilities. The update is critical and users are advised to upgrade their clusters following Red Hat's official documentation. No specific technical details or exploit information are provided in the advisory.

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in default configurations. An authenticated attacker can also achieve arbitrary code execution on the registry server by bypassing authorization checks during deserialization. This vulnerability can result in cross-tenant data access and lateral movement within the system.

A flaw was found in Feast. The system improperly deserializes user-defined functions (UDFs) stored in its registry, which are serialized using the 'dill' library. This allows a remote attacker to store a malicious UDF, leading to unauthenticated arbitrary code execution on the feature server in default configurations. An authenticated attacker can also achieve arbitrary code execution on the registry server by bypassing authorization checks during deserialization. This vulnerability can result in cross-tenant data access and lateral movement within the system.

A Regular Expression Denial of Service (ReDoS) vulnerability (CVE-2026-15154) was found in guardrails-detectors, a component of Red Hat OpenShift AI. This flaw allows a remote attacker to send specially crafted regular expressions to the public detection API, causing catastrophic backtracking. The result is a worker process consuming 100% CPU indefinitely, leading to denial of service for the guardrails-mediated large language model (LLM) pipeline. The vulnerability affects specific versions of Red Hat OpenShift AI and has a medium severity rating with a CVSS score of 6.5. Updated images and a fixed version 2.25.10 are available from Red Hat to address this issue.

The RHTAS Operator can be used with OpenShift Container Platform 4.16, 4.17, 4.18, 4.19, 4.20 and 4.21

The fence-agents packages provide a collection of scripts for handling remote power management for cluster devices. They allow failed or unreachable nodes to be forcibly restarted and removed from the cluster. Security Fix(es): * urllib3: urllib3 Streaming API improperly handles highly compressed data (CVE-2025-66471) * urllib3: urllib3 vulnerable to decompression-bomb safeguard bypass when following HTTP redirects (streaming API) (CVE-2026-21441) For more details about the security issue(s), including the impact, a CVSS score, acknowledgments, and other related information, refer to the CVE page(s) listed in the References section.