Read the docs
TI-2026-12765 Aliases CVE-2026-15154GHSA-jm96-7wvj-j3r9

Regular expression denial of service in guardrails-detectors

Priority LOW 29CWE-1333Published · Updated

Key facts

Attack vector
Adjacent network
Privileges required
None
User interaction
None
Attack complexity
Low
Impact type
Denial of service
Confidentiality · integrity · availability
None · None · High
Fix status
Fixed

Attack profile from CVSS 3.1 · CNA. Fix status from CNA and Red Hat. Impact type from CWE-1333.

Summary

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking, leading to a worker process consuming 100% CPU indefinitely and resulting in a denial of service for the entire guardrails-mediated LLM pipeline.

Why it matters now

Exploitation None reported CISA SSVC · not in CISA KEV
EPSS 0.00476 41st percentileScored 2026-11-07
Fix Fixed Red Hat: 6 advisories

SSVC decision points

CISA ADP · SSVC 2.0.3

Exploitation
None
Automatable
No
Technical impact
Partial

The decision (Track, Attend, Act) also depends on your mission and well-being impact; see CISA's SSVC guide.

Affected products

VendorProductAffected versionsFixed inStatusSource
Red HatRed Hat OpenShift AI 2.25—1784230964Patch availableCNA
Red HatRed Hat OpenShift AI 2.25—1787235925Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1785137880Patch availableCNA
Red HatRed Hat OpenShift AI 3.3—1789573032Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1783569145Patch availableCNA
Red HatRed Hat OpenShift AI 3.4—1786617316Patch availableCNA
  • Red Hat OpenShift AI 2.25 VendorRed Hat Affected — Fixed in 1784230964 Patch available CNA
  • Red Hat OpenShift AI 2.25 VendorRed Hat Affected — Fixed in 1787235925 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1785137880 Patch available CNA
  • Red Hat OpenShift AI 3.3 VendorRed Hat Affected — Fixed in 1789573032 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1783569145 Patch available CNA
  • Red Hat OpenShift AI 3.4 VendorRed Hat Affected — Fixed in 1786617316 Patch available CNA

CPE configurations NVD · 1

CPEVersionsRoleVendor
cpe:2.3:a:redhat:openshift_ai:-:*:*:*:*:*:*:*not specified by NVDVulnerableRed Hat
  • cpe:2.3:a:redhat:openshift_ai:-:*:*:*:*:*:*:* Versions not specified by NVD Vulnerable ·Red Hat

Remediation

Red Hat 6 advisories

  • RHSA-2026:73987 Released 2026-09-30 · Red Hat rating Critical
    RHOAI 3.3.7 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9 +47
  • RHSA-2026:65126 Released 2026-09-08 · Red Hat rating Important
    RHOAI 2.25.11 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-caikit-tgis-serving-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9 +47
  • RHSA-2026:60520 Released 2026-08-27 · Red Hat rating Critical
    RHOAI 3.4.4 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-automl-rhel9, registry.redhat.io/rhoai/odh-autorag-rhel9, registry.redhat.io/rhoai/odh-built-in-detector-rhel9 +47
Show 3 more Red Hat advisories
  • RHSA-2026:53263 Released 2026-08-11 · Red Hat rating Critical
    RHOAI 3.3.6 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.3 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9 +6
  • RHSA-2026:53262 Released 2026-08-11 · Red Hat rating Critical
    RHOAI 3.4.3 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 3.4 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9 +8
  • RHSA-2026:53261 Released 2026-08-11 · Red Hat rating Critical
    RHOAI 2.25.10 - Red Hat OpenShift AI
    • Red Hat OpenShift AI 2.25 registry.redhat.io/rhoai/odh-built-in-detector-rhel9, registry.redhat.io/rhoai/odh-dashboard-rhel9, registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9 +6

Vendor assessments

Red Hat

Red Hat rating: Moderate. Red Hat's page for this CVE →

ProductStatusPlan or fix
Red Hat OpenShift AI 2.25Fixed RHSA-2026:53261, RHSA-2026:65126
Red Hat OpenShift AI 3.3Fixed RHSA-2026:53263, RHSA-2026:73987
Red Hat OpenShift AI 3.4Fixed RHSA-2026:53262, RHSA-2026:60520
Not affected: 3 products
  • Red Hat OpenShift AI 2.25
  • Red Hat OpenShift AI 3.3
  • Red Hat OpenShift AI 3.4

Timeline

  1. 2026-10-02 Threatist record created from CVE-2026-15154
  2. 2026-10-03 Alias added: GHSA-jm96-7wvj-j3r9
  3. 2026-10-07 Fix available: RHSA-2026:73987 · Red Hat

References

Advisory 8

  • TI-2026-30582 LiteLLM: Authenticated command execution via MCP stdio test endpoints KEVCVSS 4.0HIGH 8.7
  • TI-2026-35991 Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks KEVCVSS 3.1MEDIUM 6.5
  • TI-2026-01159 Safe Mode Bypass in keras-team/keras CVSS 3.0HIGH 8.8
  • TI-2026-34281 JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection CVSS 3.1HIGH 7.5
  • TI-2026-28834 jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers CVSS 4.0MEDIUM 6.9
  • TI-2026-41777 Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" CVSS 3.1CRITICAL 9.1
See all 11 →

Sources

This product uses the NVD API but is not endorsed or certified by the NVD. Sources and licences