Threats tagged 'ghsa-jcjp-44w9-2wwj'

CVE-2026-18950 is a vulnerability in the odh-dashboard component where an authenticated user can exploit improper validation of the roleRef field in RoleBindings. This flaw allows specifying arbitrary roles, including highly privileged ones like cluster-admin, leading to privilege escalation within the user's namespace and potentially persistent elevated access.