Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai
Priority MEDIUM 42CWE-305Published · Updated
Key facts
- Attack vector
- Network
- Privileges required
- Low
- User interaction
- None
- Attack complexity
- Low
- Impact type
- —
- Confidentiality · integrity · availability
- High · High · High
- Fix status
- Partial Red Hat: 1 fixed, 1 without a fix
Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat.
Summary
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens, visible in the UI, can be utilized with oc --token={token} to exploit the elevated view privileges associated with the ServiceAccount, leading to unauthorized access to additional resources.
Why it matters now
Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00979 62nd percentileScored 2026-11-07
Fix Partial RHOAI-2.14-RHEL-8 (Red Hat): v2.14.0-11, v2.14.0-5, v2.14.0-6 +7Red Hat: 1 fixed, 1 without a fix
SSVC decision points
CISA ADP · SSVC 2.0.3
- Exploitation
- None
- Automatable
- No
- Technical impact
- Total
The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.
Affected products
| Vendor | Product | Affected versions | Fixed in | Status | Source |
|---|---|---|---|---|---|
| — | odh-dashboard | all versions; 2.11 | — | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-11 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-11 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-7 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-8 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-5 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-10 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-40 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-7 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-9 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-46 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-24 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-6 | Patch available | CNA |
| Red Hat | RHOAI-2.14-RHEL-8 | — | v2.14.0-40 | Patch available | CNA |
| Red Hat | Red Hat OpenShift Data Science (RHODS) | — | — | No fix listed | CNA |
| Red Hat | Red Hat OpenShift Data Science (RHODS) | — | — | No fix listed | CNA |
- odh-dashboard Vendor— Affected all versions; 2.11 Fixed in — Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-11 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-11 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-7 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-8 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-5 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-10 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-40 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-7 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-9 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-46 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-24 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-6 Patch available CNA
- RHOAI-2.14-RHEL-8 VendorRed Hat Affected — Fixed in v2.14.0-40 Patch available CNA
- Red Hat OpenShift Data Science (RHODS) VendorRed Hat Affected — Fixed in — No fix listed CNA
- Red Hat OpenShift Data Science (RHODS) VendorRed Hat Affected — Fixed in — No fix listed CNA
Remediation
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-11
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-11
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-7
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-8
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-5
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-10
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-40
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-7
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-9
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-46
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-24
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-6
- Fix · CNA RHOAI-2.14-RHEL-8 (Red Hat) Fixed in v2.14.0-40
Vendor assessments
Red Hat
Red Hat rating: Important. Red Hat's page for this CVE →
| Product | Status | Plan or fix |
|---|---|---|
| Red Hat OpenShift Data Science (RHODS) | Affected | No fix yet |
| RHOAI-2.14-RHEL-8 | Fixed | — |
Timeline
- 2026-10-02 Threatist record created from CVE-2024-7557
- 2026-10-03 Alias added: GHSA-rrc7-8w2h-xw89
- 2026-10-30 Fix available: rhoai/[email protected], rhoai/[email protected], rhoai/[email protected] +29 · CNA
- 2026-10-30 1 new reference · CNA
- 2026-10-30 Fix available: RHOAI-2.14-RHEL-8 · Red Hat
References
More Red Hat Openshift Ai vulnerabilities
- TI-2026-30582 LiteLLM: Authenticated command execution via MCP stdio test endpoints KEVCVSS 4.0HIGH 8.7
- TI-2026-35991 Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks KEVCVSS 3.1MEDIUM 6.5
- TI-2026-01159 Safe Mode Bypass in keras-team/keras CVSS 3.0HIGH 8.8
- TI-2026-34281 JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection CVSS 3.1HIGH 7.5
- TI-2026-28834 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVSS 4.0MEDIUM 6.9
- TI-2026-41777 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVSS 3.1CRITICAL 9.1
Sources
- CVE-2024-7557 · CVE Program
- CVE-2024-7557 · NVD
- FIRST EPSS
- GHSA-rrc7-8w2h-xw89 · GitHub Advisory Database · CC BY 4.0
- CVE-2024-7557 · Red Hat security data · CC BY 4.0
This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences