CVE-2026-16456 is a medium severity vulnerability in the odh-model-controller component of Red Hat OpenShift AI. It allows an authenticated user with permissions to create custom resources to exploit a flaw in the loadSecret function, which improperly reads the Secret namespace from user-controlled input without validation. This can lead to unauthorized disclosure of sensitive API keys and cloud credentials from other namespaces. There are no known exploits in the wild. Red Hat has released updated images for Red Hat OpenShift AI to address this and other vulnerabilities.