agentprime: red-hat-openshift-ai-2-25Every new CVE for red-hat-openshift-ai-2-25.https://agentprime.io/CVE-2026-86332: Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated userhttps://agentprime.io/advisories/CVE-2026-86332/https://agentprime.io/advisories/CVE-2026-86332/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 07 Sep 2026 08:39:15 GMTCVECVE-2026-18620: Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputyhttps://agentprime.io/advisories/CVE-2026-18620/https://agentprime.io/advisories/CVE-2026-18620/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:43 GMTCVECVE-2026-18618: Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listenerhttps://agentprime.io/advisories/CVE-2026-18618/https://agentprime.io/advisories/CVE-2026-18618/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:38 GMTCVECVE-2026-18611: Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentialshttps://agentprime.io/advisories/CVE-2026-18611/https://agentprime.io/advisories/CVE-2026-18611/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:35 GMTCVECVE-2026-18982: Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroleshttps://agentprime.io/advisories/CVE-2026-18982/https://agentprime.io/advisories/CVE-2026-18982/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:19 GMTCVECVE-2026-18950: Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creationhttps://agentprime.io/advisories/CVE-2026-18950/https://agentprime.io/advisories/CVE-2026-18950/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:05 GMTCVECVE-2026-18949: Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resourceshttps://agentprime.io/advisories/CVE-2026-18949/https://agentprime.io/advisories/CVE-2026-18949/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:00 GMTCVECVE-2026-18947: Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materializationhttps://agentprime.io/advisories/CVE-2026-18947/https://agentprime.io/advisories/CVE-2026-18947/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:51 GMTCVECVE-2026-18942: Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalationhttps://agentprime.io/advisories/CVE-2026-18942/https://agentprime.io/advisories/CVE-2026-18942/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:46 GMTCVECVE-2026-18941: Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authenticationhttps://agentprime.io/advisories/CVE-2026-18941/https://agentprime.io/advisories/CVE-2026-18941/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:42 GMTCVECVE-2026-18621: Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardeninghttps://agentprime.io/advisories/CVE-2026-18621/https://agentprime.io/advisories/CVE-2026-18621/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:37 GMTCVECVE-2026-18617: Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator podhttps://agentprime.io/advisories/CVE-2026-18617/https://agentprime.io/advisories/CVE-2026-18617/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:33 GMTCVECVE-2026-18608: Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-widehttps://agentprime.io/advisories/CVE-2026-18608/https://agentprime.io/advisories/CVE-2026-18608/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:28 GMTCVECVE-2026-16456: Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputyhttps://agentprime.io/advisories/CVE-2026-16456/https://agentprime.io/advisories/CVE-2026-16456/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:25 GMTCVECVE-2026-15581: Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-widehttps://agentprime.io/advisories/CVE-2026-15581/https://agentprime.io/advisories/CVE-2026-15581/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:18 GMTCVECVE-2026-15467: Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy overridehttps://agentprime.io/advisories/CVE-2026-15467/https://agentprime.io/advisories/CVE-2026-15467/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:12 GMTCVECVE-2026-16745: Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validationhttps://agentprime.io/advisories/CVE-2026-16745/https://agentprime.io/advisories/CVE-2026-16745/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 10:41:30 GMTCVECVE-2026-15574: Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug defaulthttps://agentprime.io/advisories/CVE-2026-15574/https://agentprime.io/advisories/CVE-2026-15574/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 08:01:26 GMTCVECVE-2026-15143: Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)https://agentprime.io/advisories/CVE-2026-15143/https://agentprime.io/advisories/CVE-2026-15143/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 15:25:09 GMTCVEcriticalCVE-2026-15378: Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)https://agentprime.io/advisories/CVE-2026-15378/https://agentprime.io/advisories/CVE-2026-15378/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 09:29:55 GMTCVEcriticalCVE-2026-15154: Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regexhttps://agentprime.io/advisories/CVE-2026-15154/https://agentprime.io/advisories/CVE-2026-15154/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 19:50:51 GMTCVECVE-2026-5483: Odh-dashboard: odh dashboard kubernetes service account exposurehttps://agentprime.io/advisories/CVE-2026-5483/https://agentprime.io/advisories/CVE-2026-5483/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Apr 2026 17:33:25 GMTCVECVE-2025-12805: Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicyhttps://agentprime.io/advisories/CVE-2025-12805/https://agentprime.io/advisories/CVE-2025-12805/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 26 Mar 2026 21:48:16 GMTCVECVE-2025-12103: Openshift-ai: trusty ai grants all authenticated users to list pods in any namespacehttps://agentprime.io/advisories/CVE-2025-12103/https://agentprime.io/advisories/CVE-2025-12103/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 28 Oct 2025 13:31:59 GMTCVE