Threats tagged 'ghsa-vccp-8mm3-h2f6'

A vulnerability in the odh-dashboard component of Red Hat OpenShift AI allows an attacker with access to the dashboard's Service Account token to escalate privileges to cluster-administrator level. This flaw permits access to sensitive cluster-wide credentials and keys and can disrupt multi-tenant isolation. The vulnerability is tracked as CVE-2026-18949 with a high severity score of 8.8. Red Hat has acknowledged the issue but has not yet released a fix. Users are advised to monitor vendor documentation for upgrade instructions once a patch is available.