Product by Red Hat

    Red Hat Openshift AI 2.25

    25 known vulnerabilities in Red Hat Openshift AI 2.25 (Red Hat), 0 of them actively exploited (CISA KEV).

    Key figures

    25

    Vulnerabilities

    0

    Actively exploited (KEV)

    0

    Used by ransomware

    4

    Critical

    Vulnerabilities

    Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.

    Vulnerabilities in Red Hat Openshift AI 2.25 (Red Hat)
    CriticalCVE-2026-18948

    Red Hat OpenShift AI: Deserialization of Untrusted Data

    also in 4 other products

    		9.9
    HighCVE-2026-18982

    Red Hat OpenShift AI: Execution with Unnecessary Privileges

    also in 4 other products

    		8.8
    HighCVE-2026-18617

    Red Hat OpenShift AI: Improperly Controlled Modification of Dynamically-Determined Object Attributes

    also in 4 other products

    		8.8
    HighCVE-2026-18941

    Red Hat OpenShift AI: Missing Authentication for Critical Function

    also in 4 other products

    		7.7
    HighCVE-2026-18608

    Red Hat OpenShift AI: Execution with Unnecessary Privileges

    also in 4 other products

    		8.7
    HighCVE-2026-18949

    Red Hat OpenShift AI 2.25: Execution with Unnecessary Privileges

    also in 3 other products

    		8.8
    HighCVE-2026-18618

    Red Hat OpenShift AI: Allocation of Resources Without Limits or Throttling

    also in 4 other products

    		7.5
    HighCVE-2026-18947

    Red Hat OpenShift AI: Denial of Service

    also in 4 other products

    		8.5
    CriticalCVE-2026-15143

    Guardrails-detectors: Server-Side Request Forgery (SSRF)

    also in 1 other product

    		9.3
    CriticalCVE-2026-15378

    Red Hat OpenShift AI 2.25: Server-Side Request Forgery (SSRF)

    also in 2 other products

    		9.3
    HighCVE-2026-18950

    Red Hat OpenShift AI: Incorrect Privilege Assignment

    also in 4 other products

    		8.8
    HighCVE-2026-15467

    Red Hat OpenShift AI: Incorrect Privilege Assignment

    also in 4 other products

    		8.1
    CriticalCVE-2026-5483

    Odh-dashboard: odh dashboard kubernetes service account exposure

    also in 5 other products

    		9.9
    HighCVE-2026-18611

    Red Hat OpenShift AI: Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)

    also in 4 other products

    		7.5
    HighCVE-2026-16745

    Red Hat OpenShift AI 2.25: Origin Validation Error

    also in 3 other products

    		8.8
    HighCVE-2026-18621

    Red Hat: Incorrect Privilege Assignment

    also in 4 other products

    		7.6
    HighCVE-2026-15574

    Red Hat OpenShift AI 2.25: Insertion of Sensitive Information into Externally-Accessible File or Directory

    also in 1 other product

    		7.5
    HighCVE-2026-15581

    Red Hat OpenShift AI: Missing Authentication for Critical Function

    also in 4 other products

    		8.0
    HighCVE-2026-18620

    Red Hat OpenShift AI: Authorization Bypass Through User-Controlled Key

    also in 4 other products

    		7.1
    MediumCVE-2026-86332

    Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user

    also in 2 other products

    		6.5
    MediumCVE-2026-15154

    Guardrails-detectors: Inefficient Regular Expression Complexity

    also in 4 other products

    		6.5
    MediumCVE-2026-16456

    Red Hat OpenShift AI 2.25: Confused Deputy

    also in 3 other products

    		6.5
    HighCVE-2025-12805

    Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy

    also in 2 other products

    		8.1
    MediumCVE-2026-18942

    Red Hat OpenShift AI 2.25: security vulnerability

    also in 2 other products

    		5.5
    MediumCVE-2025-12103

    Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace

    also in 2 other products

    		5.0

    News

    All products by Red Hat