A vulnerability in the Red Hat OpenShift AI (RHOAI) overlay for the training operator allows users with Kubernetes 'edit ClusterRole' permissions in a namespace to create, modify, and delete TrainJobs. This permission aggregation flaw, when combined with another vulnerability permitting arbitrary pod configurations, could enable a remote attacker with namespace editor privileges to escalate privileges and potentially execute arbitrary code.