Red Hat Security Advisory

RHSA-2026:53263

RHOAI 3.3.6 - Red Hat OpenShift AI

Released 2026-08-11 · Red Hat rating Critical · View on Red Hat →

Fixed in

Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9 +6

Fixes 18 records

TI-2026-15486 CVE-2026-18948 · GHSA-gg2p-37pv-v7fq

Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server and registry server

MEDIUM 45

A flaw was found in Feast.

CVSS 3.1CRITICAL 9.9 Network Low privileges No interaction EPSS 0.01079 Published 2026-08-10 Fixed in 1786110051, 1786110033 +3 CWE-502

TI-2026-15489 CVE-2026-18951 · GHSA-h7xh-qc2m-rc58

Improper access control in Red Hat OpenShift AI 3.3

MEDIUM 42

A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00915 Published 2026-08-10 Fixed in 1785188461, 1790137153 +4 CWE-267

TI-2026-15512 CVE-2026-18982 · GHSA-v6pg-cp3x-x49r

Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles

MEDIUM 41

A flaw was found in the RHOAI training-operator.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00791 Published 2026-08-10 Fixed in 1785187053, 1785188461 +4 CWE-250

TI-2026-15488 CVE-2026-18950 · GHSA-jcjp-44w9-2wwj

Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation

MEDIUM 41

A flaw was found in odh-dashboard.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00523 Published 2026-08-10 Fixed in 1785940823, 1786109683 +1 CWE-266

TI-2026-15487 CVE-2026-18949 · GHSA-vccp-8mm3-h2f6

Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources

MEDIUM 41

A flaw was found in odh-dashboard.

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00663 Published 2026-08-10 Fixed in 1785940823, 1791853432 +9 CWE-250

TI-2026-15260 CVE-2026-18617 · GHSA-g6qh-932v-chpq

Mass assignment in Red Hat OpenShift AI 2.25

MEDIUM 41

A flaw was found in the Data Science Pipelines Operator (DSPO).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00733 Published 2026-08-10 Fixed in 1785189332, 1788182334 +5 CWE-915

TI-2026-15252 CVE-2026-18608 · GHSA-vh9j-mvrr-922q

Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*…

MEDIUM 41

A flaw was found in the Data Science Pipelines Operator (DSPO).

CVSS 3.1HIGH 8.7 Network High privileges No interaction EPSS 0.007 Published 2026-08-10 Fixed in 1785189332, 1788182334 +5 CWE-250

TI-2026-15261 CVE-2026-18618 · GHSA-cr6h-6g58-pq2g

Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

MEDIUM 40

A flaw was found in ml-metadata.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00846 Published 2026-08-10 Fixed in 1785260280, 1785262015 +4 CWE-770

TI-2026-15254 CVE-2026-18611 · GHSA-5qmg-pgg7-3rjj

Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

MEDIUM 40

A flaw was found in the Data Science Pipelines Operator.

CVSS 3.1HIGH 7.5 Network No auth No interaction EPSS 0.00606 Published 2026-08-10 Fixed in 1785189332, 1788182334 +5 CWE-338

TI-2026-13944 CVE-2026-16745 · GHSA-h5q4-fjj4-4792

Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation

MEDIUM 40

A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI).

CVSS 3.1HIGH 8.8 Network Low privileges No interaction EPSS 0.00465 Published 2026-07-23 Fixed in 1785940823, 1788312226 +4 CWE-346

TI-2026-15485 CVE-2026-18947 · GHSA-mvxh-8c54-7fwx

Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization

LOW 38

A flaw was found in Feast.

CVSS 3.1HIGH 8.5 Network Low privileges No interaction EPSS 0.00594 Published 2026-08-10 Fixed in 1786110051, 1786110033 +1 CWE-862

TI-2026-13009 CVE-2026-15467 · GHSA-qw34-v3jw-3crv

Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass…

LOW 38

A flaw was found in the trustyai-service-operator's LMEvalJob controller.

CVSS 3.1HIGH 8.1 Network Low privileges No interaction EPSS 0.00597 Published 2026-08-10 Fixed in 1785187119, 1785187521 +4 CWE-266

TI-2026-13112 CVE-2026-15581 · GHSA-7rjm-5cpg-vwpq

Missing authentication in Red Hat OpenShift AI 2.25

LOW 37

A flaw was found in the TrustyAI Service (TAS) deployment.

CVSS 3.1HIGH 8.0 Adjacent network Low privileges No interaction EPSS 0.00417 Published 2026-08-10 Fixed in 1785187119, 1787330073 +5 CWE-306

TI-2026-15480 CVE-2026-18941 · GHSA-2xfw-wg76-86w9

Missing authentication in Red Hat OpenShift AI 2.25

LOW 35

A flaw was found in Feast and feast-operator.

CVSS 3.1HIGH 7.7 Network Low privileges No interaction EPSS 0.00904 Published 2026-08-10 Fixed in 1786110051, 1786110033 +4 CWE-306

TI-2026-15263 CVE-2026-18621 · GHSA-6wxg-hpw6-m2x7

Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

LOW 34

A flaw was found in Data Science Pipelines (DSP).

CVSS 3.1HIGH 7.6 Network Low privileges No interaction EPSS 0.0052 Published 2026-08-10 Fixed in 1785189934, 1788256711 +4 CWE-266

TI-2026-15262 CVE-2026-18620 · GHSA-g68c-wmxr-x3rh

Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy

LOW 32

A flaw was found in Data Science Pipelines.

CVSS 3.1HIGH 7.1 Network Low privileges No interaction EPSS 0.00478 Published 2026-08-10 Fixed in 1785189934, 1788256711 +5 CWE-639

TI-2026-13751 CVE-2026-16456 · GHSA-w7qg-jg9c-w9mm

Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy

LOW 29

A flaw was found in the `odh-model-controller`.

CVSS 3.1MEDIUM 6.5 Network Low privileges No interaction EPSS 0.00422 Published 2026-08-10 Fixed in 1785187158, 1785189333 +1 CWE-441

TI-2026-12765 CVE-2026-15154 · GHSA-jm96-7wvj-j3r9

Regular expression denial of service in guardrails-detectors

LOW 29

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI.

CVSS 3.1MEDIUM 6.5 Adjacent network No auth No interaction EPSS 0.00476 Published 2026-07-08 Fixed in 1784230964, 1787235925 +4 CWE-1333