Red Hat OpenShift AI 3.4.

Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorization

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Broken access control

Libxml2: double-free/uaf in libxml2 python bindings

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation

• Red Hat OpenShift AI 3.4
• Privilege escalation

Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputy

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Broken access control

Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listener

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Denial of service

Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Weak cryptography or TLS

Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroles

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Privilege escalation

Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole

• Red Hat OpenShift AI 3.3
• Red Hat OpenShift AI 3.4
• Privilege escalation
• Broken access control

Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Privilege escalation

Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Privilege escalation

Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Broken access control

Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.4
• Code injection

Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Authentication bypass

Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Privilege escalation

Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Broken access control

Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Privilege escalation

Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• CWE-441

Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Authentication bypass

Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy override

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Privilege escalation

Maas-billing: maas api: privilege escalation via forged http headers due to missing authentication

• Red Hat OpenShift AI 3.4
• Red Hat OpenShift AI (RHOAI)
• Authentication bypass

Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)

• Red Hat OpenShift AI 3.4
• Red Hat OpenShift AI (RHOAI)
• Broken access control

Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• CWE-346

Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.c

• xdgmime
• Red Hat Enterprise Linux 10
• Memory corruption

Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug default

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.4
• Information disclosure

Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.4
• Server-side request forgery (SSRF)

Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Server-side request forgery (SSRF)

Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Denial of service

Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff image

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versions

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-923

Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of service

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

• Red Hat Enterprise Linux AI 3.3 for RHEL 9
• Red Hat Enterprise Linux AI 3.4 for RHEL 9
• Memory corruption

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

• Red Hat Enterprise Linux AI 3.3 for RHEL 9
• Red Hat Enterprise Linux AI 3.4 for RHEL 9
• Memory corruption

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

• Red Hat Enterprise Linux AI 3.3 for RHEL 9
• Red Hat Enterprise Linux AI 3.4 for RHEL 9
• Memory corruption

Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pin

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removal

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-208

Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplication

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handling

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• CWE-193

Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libxslt: use-after-free with key data stored cross-rvt

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption

Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oom

• Red Hat Enterprise Linux 10
• Red Hat Enterprise Linux 10.0 Extended Update Support
• Memory corruption