agentprime: red-hat-openshift-ai-3-4Every new CVE for red-hat-openshift-ai-3-4.https://agentprime.io/CVE-2026-96512: Sudo: sudo: tz environment variable allows bypass of notbefore/notafter time-based authorizationhttps://agentprime.io/advisories/CVE-2026-96512/https://agentprime.io/advisories/CVE-2026-96512/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Wed, 23 Sep 2026 13:22:33 GMTCVECVE-2026-74860: Libxml2: double-free/uaf in libxml2 python bindingshttps://agentprime.io/advisories/CVE-2026-74860/https://agentprime.io/advisories/CVE-2026-74860/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 08 Sep 2026 11:27:45 GMTCVECVE-2026-15218: Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalationhttps://agentprime.io/advisories/CVE-2026-15218/https://agentprime.io/advisories/CVE-2026-15218/CVSS 7.9 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 17 Aug 2026 13:39:18 GMTCVECVE-2026-18620: Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authorization check — confused deputyhttps://agentprime.io/advisories/CVE-2026-18620/https://agentprime.io/advisories/CVE-2026-18620/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:43 GMTCVECVE-2026-18618: Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable on listenerhttps://agentprime.io/advisories/CVE-2026-18618/https://agentprime.io/advisories/CVE-2026-18618/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:38 GMTCVECVE-2026-18611: Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentialshttps://agentprime.io/advisories/CVE-2026-18611/https://agentprime.io/advisories/CVE-2026-18611/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:35 GMTCVECVE-2026-18982: Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/admin clusterroleshttps://agentprime.io/advisories/CVE-2026-18982/https://agentprime.io/advisories/CVE-2026-18982/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:19 GMTCVECVE-2026-18951: Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrolehttps://agentprime.io/advisories/CVE-2026-18951/https://agentprime.io/advisories/CVE-2026-18951/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:10 GMTCVECVE-2026-18950: Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creationhttps://agentprime.io/advisories/CVE-2026-18950/https://agentprime.io/advisories/CVE-2026-18950/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:05 GMTCVECVE-2026-18949: Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resourceshttps://agentprime.io/advisories/CVE-2026-18949/https://agentprime.io/advisories/CVE-2026-18949/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:45:00 GMTCVECVE-2026-18947: Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materializationhttps://agentprime.io/advisories/CVE-2026-18947/https://agentprime.io/advisories/CVE-2026-18947/CVSS 8.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:51 GMTCVECVE-2026-18942: Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalationhttps://agentprime.io/advisories/CVE-2026-18942/https://agentprime.io/advisories/CVE-2026-18942/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:46 GMTCVECVE-2026-18941: Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authenticationhttps://agentprime.io/advisories/CVE-2026-18941/https://agentprime.io/advisories/CVE-2026-18941/CVSS 7.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:42 GMTCVECVE-2026-18621: Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardeninghttps://agentprime.io/advisories/CVE-2026-18621/https://agentprime.io/advisories/CVE-2026-18621/CVSS 7.6 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:37 GMTCVECVE-2026-18617: Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator podhttps://agentprime.io/advisories/CVE-2026-18617/https://agentprime.io/advisories/CVE-2026-18617/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:33 GMTCVECVE-2026-18608: Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-widehttps://agentprime.io/advisories/CVE-2026-18608/https://agentprime.io/advisories/CVE-2026-18608/CVSS 8.7 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:28 GMTCVECVE-2026-16456: Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputyhttps://agentprime.io/advisories/CVE-2026-16456/https://agentprime.io/advisories/CVE-2026-16456/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:25 GMTCVECVE-2026-15581: Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-widehttps://agentprime.io/advisories/CVE-2026-15581/https://agentprime.io/advisories/CVE-2026-15581/CVSS 8.0 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:18 GMTCVECVE-2026-15467: Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass protected environment variable filtering, allowing trust_remote_code policy overridehttps://agentprime.io/advisories/CVE-2026-15467/https://agentprime.io/advisories/CVE-2026-15467/CVSS 8.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:12 GMTCVECVE-2026-14450: Maas-billing: maas api: privilege escalation via forged http headers due to missing authenticationhttps://agentprime.io/advisories/CVE-2026-14450/https://agentprime.io/advisories/CVE-2026-14450/CVSS 9.9 (Critical). Critical: CVSS score 9.9: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:06 GMTCVEcriticalCVE-2026-13717: Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)https://agentprime.io/advisories/CVE-2026-13717/https://agentprime.io/advisories/CVE-2026-13717/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 10 Aug 2026 20:44:01 GMTCVECVE-2026-16745: Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validationhttps://agentprime.io/advisories/CVE-2026-16745/https://agentprime.io/advisories/CVE-2026-16745/CVSS 8.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 23 Jul 2026 10:41:30 GMTCVECVE-2026-16118: Xdgmime: heap-based buffer overflow in _xdg_mime_magic_parse_magic_line() in xdgmimemagic.chttps://agentprime.io/advisories/CVE-2026-16118/https://agentprime.io/advisories/CVE-2026-16118/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 17 Jul 2026 19:44:40 GMTCVECVE-2026-15574: Vllm-orchestrator-gateway: vllm-orchestrator-gateway: authorization header and full chat payloads logged at hard-coded debug defaulthttps://agentprime.io/advisories/CVE-2026-15574/https://agentprime.io/advisories/CVE-2026-15574/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 13 Jul 2026 08:01:26 GMTCVECVE-2026-15143: Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)https://agentprime.io/advisories/CVE-2026-15143/https://agentprime.io/advisories/CVE-2026-15143/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 15:25:09 GMTCVEcriticalCVE-2026-15378: Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)https://agentprime.io/advisories/CVE-2026-15378/https://agentprime.io/advisories/CVE-2026-15378/CVSS 9.3 (Critical). Critical: CVSS score 9.3: 9.0 or more. Published by the CVE Program. Not analysed by agentprime yet.Fri, 10 Jul 2026 09:29:55 GMTCVEcriticalCVE-2026-15154: Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regexhttps://agentprime.io/advisories/CVE-2026-15154/https://agentprime.io/advisories/CVE-2026-15154/CVSS 6.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Wed, 08 Jul 2026 19:50:51 GMTCVECVE-2026-12912: Libtiff: libtiff: heap-based buffer overflow via crafted pixarlog-compressed tiff imagehttps://agentprime.io/advisories/CVE-2026-12912/https://agentprime.io/advisories/CVE-2026-12912/CVSS 7.3 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 29 Jun 2026 16:31:34 GMTCVECVE-2026-55655: Openssh: local mitm of x11 forwarding via abstract unix socket pre-binding in red hat enterprise linux openssh client versionshttps://agentprime.io/advisories/CVE-2026-55655/https://agentprime.io/advisories/CVE-2026-55655/CVSS 5.0 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 03:36:25 GMTCVECVE-2026-55653: Openssh: double free in red hat enterprise linux versions of openssh dh-gex client path during fips known-group validation leads to client-side denial of servicehttps://agentprime.io/advisories/CVE-2026-55653/https://agentprime.io/advisories/CVE-2026-55653/CVSS 4.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 23 Jun 2026 03:36:22 GMTCVECVE-2026-56211: Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frameshttps://agentprime.io/advisories/CVE-2026-56211/https://agentprime.io/advisories/CVE-2026-56211/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:33 GMTCVECVE-2026-56210: Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_idhttps://agentprime.io/advisories/CVE-2026-56210/https://agentprime.io/advisories/CVE-2026-56210/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:33 GMTCVECVE-2026-56209: Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijackhttps://agentprime.io/advisories/CVE-2026-56209/https://agentprime.io/advisories/CVE-2026-56209/CVSS 7.1 (High). Published by the CVE Program. Not analysed by agentprime yet.Fri, 19 Jun 2026 16:28:26 GMTCVECVE-2026-42014: Gnutls: gnutls: use-after-free in gnutls_pkcs11_token_set_pinhttps://agentprime.io/advisories/CVE-2026-42014/https://agentprime.io/advisories/CVE-2026-42014/CVSS 6.6 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 16 Jun 2026 00:49:15 GMTCVECVE-2026-5419: Gnutls: gnutls: information disclosure via timing side-channel in pkcs#7 padding removalhttps://agentprime.io/advisories/CVE-2026-5419/https://agentprime.io/advisories/CVE-2026-5419/CVSS 3.7 (Low). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 19:26:56 GMTCVECVE-2026-10118: Poppler: integer overflow in poppler splashoutputdev::tilingpatternfill leads to heap buffer overflow via unchecked dimension multiplicationhttps://agentprime.io/advisories/CVE-2026-10118/https://agentprime.io/advisories/CVE-2026-10118/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Mon, 01 Jun 2026 15:33:39 GMTCVECVE-2026-42015: Gnutls: gnutls: memory corruption due to off-by-one error in pkcs#12 bag handlinghttps://agentprime.io/advisories/CVE-2026-42015/https://agentprime.io/advisories/CVE-2026-42015/CVSS 5.3 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Tue, 26 May 2026 21:29:32 GMTCVECVE-2026-4775: Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processinghttps://agentprime.io/advisories/CVE-2026-4775/https://agentprime.io/advisories/CVE-2026-4775/CVSS 7.8 (High). Published by the CVE Program. Not analysed by agentprime yet.Tue, 24 Mar 2026 14:42:47 GMTCVECVE-2025-10911: Libxslt: use-after-free with key data stored cross-rvthttps://agentprime.io/advisories/CVE-2025-10911/https://agentprime.io/advisories/CVE-2025-10911/CVSS 5.5 (Medium). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Sep 2025 15:13:14 GMTCVECVE-2023-52355: Libtiff: tiffrasterscanlinesize64 produce too-big size and could cause oomhttps://agentprime.io/advisories/CVE-2023-52355/https://agentprime.io/advisories/CVE-2023-52355/CVSS 7.5 (High). Published by the CVE Program. Not analysed by agentprime yet.Thu, 25 Jan 2024 20:03:35 GMTCVE