Product by Red Hat
Red Hat OpenShift AI (RHOAI)
12 known vulnerabilities in Red Hat OpenShift AI (RHOAI) (Red Hat), 2 of them actively exploited (CISA KEV).
Key figures
12
Vulnerabilities
2
Actively exploited (KEV)
0
Used by ransomware
4
Critical
Vulnerabilities
Actively exploited vulnerabilities (CISA KEV) first, then by priority. Click a column header to re-sort the table.
| Critical | CVE-2026-42271 | LiteLLM: Authenticated command execution via MCP stdio test endpoints In CISA KEValso in 3 other products | 8.8 | |
| Critical | CVE-2026-48710 | Kludex Starlette HTTP Request/Response Smuggling Vulnerability In CISA KEValso in 9 other products | 6.5 | |
| High | CVE-2023-54365 | Traefik - Denial of Service via HTTP/2 Request Handling | 7.5 | |
| High | CVE-2026-46625 | JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection | 7.5 | |
| High | CVE-2026-4775 | Red Hat: Integer Overflow or Wraparound | 7.8 | |
| Critical | CVE-2026-58016 | Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml" | 9.1 | |
| Critical | CVE-2026-5483 | Odh-dashboard: odh dashboard kubernetes service account exposure | 9.9 | |
| High | CVE-2024-7557 | Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai | 8.8 | |
| High | CVE-2026-1462 | Safe Mode Bypass in keras-team/keras | 8.8 | |
| High | CVE-2026-39979 | jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers | 6.5 | |
| Medium | CVE-2026-15154 | Guardrails-detectors: Inefficient Regular Expression Complexity | 6.5 | |
| High | CVE-2025-12805 | Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy | 8.1 |