TI-2026-46366 CVE-2026-64849 · GHSA-7gwp-5pfp-969j
Server-side request forgery in mlflow
Priority CRITICAL 97KEV
MLflow is an open source AI engineering platform for agents, large language models, and machine learning models.
RHSA-2026:60367
RHOAI 3.5 - Red Hat OpenShift AI
Released 2026-08-26 · Red Hat rating Critical · View on Red Hat →
Fixed in
- Red Hat OpenShift AI 3.5 registry.redhat.io/rhoai/odh-latency-predictor-prediction-rhel9, registry.redhat.io/rhoai/odh-latency-predictor-training-rhel9
Fixes 13 records
TI-2025-41020 CVE-2025-66626 · GHSA-xrqc-7xgx-c9vh
argoproj/argo-workflows is vulnerable to RCE via ZipSlip and symbolic links
Priority HIGH 70
Argo Workflows is an open source container-native workflow engine for orchestrating parallel jobs on Kubernetes.
TI-2026-35886 CVE-2026-48526 · GHSA-xgmm-8j9v-c9wx
PyJWT: Public-key JWK accepted as HMAC secret enables forged HS256 tokens when mixed families are allowed
Priority HIGH 68
PyJWT is a JSON Web Token implementation in Python.
TI-2026-15489 CVE-2026-18951 · GHSA-h7xh-qc2m-rc58
Improper access control in Red Hat OpenShift AI 3.3
Priority MEDIUM 42
A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator.
TI-2026-15512 CVE-2026-18982 · GHSA-v6pg-cp3x-x49r
Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles
Priority MEDIUM 41
A flaw was found in the RHOAI training-operator.
TI-2026-15260 CVE-2026-18617 · GHSA-g6qh-932v-chpq
Mass assignment in Red Hat OpenShift AI 2.25
Priority MEDIUM 41
A flaw was found in the Data Science Pipelines Operator (DSPO).
TI-2026-15252 CVE-2026-18608 · GHSA-vh9j-mvrr-922q
Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*…
Priority MEDIUM 41
A flaw was found in the Data Science Pipelines Operator (DSPO).
TI-2026-15261 CVE-2026-18618 · GHSA-cr6h-6g58-pq2g
Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener
Priority MEDIUM 40
A flaw was found in ml-metadata.
TI-2026-15254 CVE-2026-18611 · GHSA-5qmg-pgg7-3rjj
Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials
Priority MEDIUM 40
A flaw was found in the Data Science Pipelines Operator.
TI-2026-13009 CVE-2026-15467 · GHSA-qw34-v3jw-3crv
Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass…
Priority LOW 38
A flaw was found in the trustyai-service-operator's LMEvalJob controller.
TI-2026-13112 CVE-2026-15581 · GHSA-7rjm-5cpg-vwpq
Missing authentication in Red Hat OpenShift AI 2.25
Priority LOW 37
A flaw was found in the TrustyAI Service (TAS) deployment.
TI-2026-15262 CVE-2026-18620 · GHSA-g68c-wmxr-x3rh
Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy
Priority LOW 32
A flaw was found in Data Science Pipelines.
TI-2026-07594 CVE-2026-8643 · GHSA-wf93-45jw-7689
pip can extract console_scripts and gui_scripts outside installation directory
Priority LOW 19
pip would treat console_scripts and gui_scripts as paths instead of file names without sanitizing the resolved absolute path to the installation directory, leading to entry points being installed outside the installation…