# Red Hat OpenShift AI 3.3.

Every CVE that names Red Hat OpenShift AI 3.3 among its affected products, newest first. Vendors and products are as the CNA wrote them.

## Records, newest first

- [Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy](https://agentprime.io/advisories/CVE-2026-18620.md)
  `CVE-2026-18620` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 7.1 High · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control
- [Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener](https://agentprime.io/advisories/CVE-2026-18618.md)
  `CVE-2026-18618` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 7.5 High · Not analysed yet · Published 10 Aug 2026 · Tags: Denial of service
- [Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials](https://agentprime.io/advisories/CVE-2026-18611.md)
  `CVE-2026-18611` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 7.5 High · Not analysed yet · Published 10 Aug 2026 · Tags: Weak cryptography or TLS
- [Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles](https://agentprime.io/advisories/CVE-2026-18982.md)
  `CVE-2026-18982` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 8.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: Privilege escalation
- [Odh-training-operator-rhel9: \[trainer v2 security\] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole](https://agentprime.io/advisories/CVE-2026-18951.md)
  `CVE-2026-18951` · CVE record: Red Hat Red Hat OpenShift AI 3.3 and 2 more · CVSS 8.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: Privilege escalation, Broken access control
- [Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation](https://agentprime.io/advisories/CVE-2026-18950.md)
  `CVE-2026-18950` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 8.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: Privilege escalation
- [Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources](https://agentprime.io/advisories/CVE-2026-18949.md)
  `CVE-2026-18949` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 8.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: Privilege escalation
- [Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization](https://agentprime.io/advisories/CVE-2026-18947.md)
  `CVE-2026-18947` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 8.5 High · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control
- [Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication](https://agentprime.io/advisories/CVE-2026-18941.md)
  `CVE-2026-18941` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 7.7 High · Not analysed yet · Published 10 Aug 2026 · Tags: Authentication bypass
- [Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening](https://agentprime.io/advisories/CVE-2026-18621.md)
  `CVE-2026-18621` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 7.6 High · Not analysed yet · Published 10 Aug 2026 · Tags: Privilege escalation
- [Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod](https://agentprime.io/advisories/CVE-2026-18617.md)
  `CVE-2026-18617` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 8.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control
- [Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:\*, kubeflow.org \*/\*, and clusterrole/binding crud cluster-wide](https://agentprime.io/advisories/CVE-2026-18608.md)
  `CVE-2026-18608` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 8.7 High · Not analysed yet · Published 10 Aug 2026 · Tags: Privilege escalation
- [Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy](https://agentprime.io/advisories/CVE-2026-16456.md)
  `CVE-2026-16456` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: CWE-441
- [Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide](https://agentprime.io/advisories/CVE-2026-15581.md)
  `CVE-2026-15581` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 8.0 High · Not analysed yet · Published 10 Aug 2026 · Tags: Authentication bypass
- [Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override](https://agentprime.io/advisories/CVE-2026-15467.md)
  `CVE-2026-15467` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 8.1 High · Not analysed yet · Published 10 Aug 2026 · Tags: Privilege escalation
- [Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation](https://agentprime.io/advisories/CVE-2026-16745.md)
  `CVE-2026-16745` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 8.8 High · Not analysed yet · Published 23 Jul 2026 · Tags: CWE-346
- [Xdgmime: heap-based buffer overflow in \_xdg_mime_magic_parse_magic_line() in xdgmimemagic.c](https://agentprime.io/advisories/CVE-2026-16118.md)
  `CVE-2026-16118` · CVE record: xdg xdgmime and 4 more · CVSS 7.1 High · Not analysed yet · Published 17 Jul 2026 · Tags: Memory corruption
- [Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)](https://agentprime.io/advisories/CVE-2026-15378.md)
  `CVE-2026-15378` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 9.3 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Jul 2026 · Tags: Server-side request forgery (SSRF)
- [Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex](https://agentprime.io/advisories/CVE-2026-15154.md)
  `CVE-2026-15154` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Denial of service
- [Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions](https://agentprime.io/advisories/CVE-2026-55655.md)
  `CVE-2026-55655` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 5.0 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: CWE-923
- [Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service](https://agentprime.io/advisories/CVE-2026-55653.md)
  `CVE-2026-55653` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 4.3 Medium · Not analysed yet · Published 23 Jun 2026 · Tags: Memory corruption
- [Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames](https://agentprime.io/advisories/CVE-2026-56211.md)
  `CVE-2026-56211` · CVE record: Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption
- [Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id](https://agentprime.io/advisories/CVE-2026-56210.md)
  `CVE-2026-56210` · CVE record: Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption
- [Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack](https://agentprime.io/advisories/CVE-2026-56209.md)
  `CVE-2026-56209` · CVE record: Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption
- [Odh-dashboard: odh dashboard kubernetes service account exposure](https://agentprime.io/advisories/CVE-2026-5483.md)
  `CVE-2026-5483` · CVE record: Red Hat Red Hat OpenShift AI 2.16 and 4 more · CVSS 8.5 High · Not analysed yet · Published 10 Apr 2026 · Tags: Information disclosure

## Filters and formats

Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page.

- The same list as JSON: <https://api.agentprime.io/v1/advisories?technology=red-hat-openshift-ai-3-3>
- Every list: <https://agentprime.io/advisories.md>, critical: <https://agentprime.io/advisories/critical.md>; by weakness: <https://agentprime.io/advisories/tag/sql-injection.md> and the other tags in <https://agentprime.io/llms.txt>; by technology: `/advisories/technology/<slug>.md` (`fortinet-fortimail`)

---

The web page: <https://agentprime.io/advisories/technology/red-hat-openshift-ai-3-3/>. Everything for agents: <https://agentprime.io/llms.txt>.