Product by Red Hat

    Openshift AI

    22 known vulnerabilities in Openshift AI (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    22

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    1

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Openshift AI (Red Hat)
    CriticalCVE-2026-18948

    Red Hat OpenShift AI: Deserialization of Untrusted Data

    also in 4 other products

    9.9
    HighCVE-2025-66418

    urllib3 allows an unbounded number of links in the decompression chain

    also in 7 other products

    7.5
    HighCVE-2026-18951

    Red Hat OpenShift AI 3.3: Privilege Defined With Unsafe Actions

    also in 3 other products

    8.8
    HighCVE-2026-18982

    Red Hat OpenShift AI: Execution with Unnecessary Privileges

    also in 4 other products

    8.8
    HighCVE-2026-18617

    Red Hat OpenShift AI: Improperly Controlled Modification of Dynamically-Determined Object Attributes

    also in 4 other products

    8.8
    HighCVE-2026-18941

    Red Hat OpenShift AI: Missing Authentication for Critical Function

    also in 4 other products

    7.7
    HighCVE-2026-22807

    vLLM affected by RCE via auto_map dynamic module loading during model initialization

    also in 3 other products

    8.8
    HighCVE-2026-18608

    Red Hat OpenShift AI: Execution with Unnecessary Privileges

    also in 4 other products

    8.7
    HighCVE-2026-18949

    Red Hat OpenShift AI 2.25: Execution with Unnecessary Privileges

    also in 3 other products

    8.8
    HighCVE-2026-18618

    Red Hat OpenShift AI: Allocation of Resources Without Limits or Throttling

    also in 4 other products

    7.5
    HighCVE-2026-18947

    Red Hat OpenShift AI: Denial of Service

    also in 4 other products

    8.5
    HighCVE-2026-18950

    Red Hat OpenShift AI: Incorrect Privilege Assignment

    also in 4 other products

    8.8
    HighCVE-2026-15467

    Red Hat OpenShift AI: Incorrect Privilege Assignment

    also in 4 other products

    8.1
    HighCVE-2026-18611

    Red Hat OpenShift AI: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

    also in 4 other products

    7.5
    HighCVE-2026-16745

    Red Hat OpenShift AI 2.25: Origin Validation Error

    also in 3 other products

    8.8
    HighCVE-2026-18621

    Red Hat: Incorrect Privilege Assignment

    also in 4 other products

    7.6
    HighCVE-2026-15581

    Red Hat OpenShift AI: Missing Authentication for Critical Function

    also in 4 other products

    8.0
    HighCVE-2026-24049

    wheel Allows Arbitrary File Permission Modification via Path Traversal

    also in 4 other products

    7.1
    HighCVE-2026-18620

    Red Hat OpenShift AI: Authorization Bypass Through User-Controlled Key

    also in 4 other products

    7.1
    MediumCVE-2026-15154

    Guardrails-detectors: Inefficient Regular Expression Complexity

    also in 4 other products

    6.5
    MediumCVE-2026-16456

    Red Hat OpenShift AI 2.25: Confused Deputy

    also in 3 other products

    6.5
    HighCVE-2025-62372

    vLLM vulnerable to DoS with incorrect shape of multimodal embedding inputs

    also in 3 other products

    6.5

    All products by Red Hat