Vulnerabilidades do Red Hat Red Hat OpenShift AI 2.16
🔔 Criar alerta RSS Verificador de versão
CVEs publicadas que afetam Red Hat Red Hat OpenShift AI 2.16: 3 registro(s), com versões afetadas e correções.
CVE-2026-5483
Crítica · 9.9
CWE-201 10/04/2026
Odh-dashboard: odh dashboard kubernetes service account exposure
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
CVE-2025-6193
Média · 5.9
CWE-78 20/06/2025
Trustyai-explainability: command injection via lmevaljob cr
A command injection vulnerability was discovered in the TrustyAI Explainability toolkit. Arbitrary commands placed in certain fields of a LMEValJob custom resource (CR) may be executed in the LMEvalJob pod's terminal. This issue can be exploited via a maliciously crafted LMEvalJob by a user with permissions to deploy a CR.
CVE-2024-10963
Alta · 7.4
CWE-287 07/11/2024
Pam: improper hostname interpretation in pam_access leads to access control bypass
A flaw was found in pam_access, where certain rules in its configuration file are mistakenly treated as hostnames. This vulnerability allows attackers to trick the system by pretending to be a trusted hostname, gaining unauthorized access. This issue poses a risk for systems that rely on this feature to control who can access certain services or terminals.