Threats tagged 'ghsa-92xh-3g2w-c2j3'

CVE-2026-13451 is a Server-Side Request Forgery (SSRF) vulnerability in KServe affecting namespace-scoped users with create/update permissions on InferenceService custom resources. Exploitation allows the storage-initializer init container to make arbitrary outbound HTTP/HTTPS requests from inside the cluster, potentially leading to information disclosure such as theft of the node's IAM credentials or access to internal cluster services. This vulnerability impacts typical data scientist roles in OpenShift AI / KServe deployments. No specific affected versions or patch availability details are provided in the input data.