# Red Hat OpenShift AI (RHOAI). Every CVE that names Red Hat OpenShift AI (RHOAI) among its affected products, newest first. Vendors and products are as the CNA wrote them. ## Records, newest first - [Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw](https://agentprime.io/advisories/CVE-2026-107912.md) `CVE-2026-107912` · CVE record: Red Hat Exploit Intelligence and 4 more · CVSS 7.7 High · Not analysed yet · Published 5 Nov 2026 · Tags: Broken access control - [Json-glib: json-glib: infinite loop in json_path_query() with negative jsonpath slice step](https://agentprime.io/advisories/CVE-2026-120194.md) `CVE-2026-120194` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.5 High · Not analysed yet · Published 31 Oct 2026 · Tags: Denial of service - [Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization](https://agentprime.io/advisories/CVE-2026-117574.md) `CVE-2026-117574` · CVE record: Red Hat Red Hat OpenShift AI (RHOAI) · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 28 Oct 2026 · Tags: Broken access control - [Kserve: kserve: server-side request forgery via malicious storageuri](https://agentprime.io/advisories/CVE-2026-13451.md) `CVE-2026-13451` · CVE record: Red Hat Red Hat OpenShift AI (RHOAI) · CVSS 7.7 High · Not analysed yet · Published 28 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers](https://agentprime.io/advisories/CVE-2026-114236.md) `CVE-2026-114236` · CVE record: Red Hat Confidential Compute Attestation and 4 more · CVSS 3.3 Low · Not analysed yet · Published 21 Oct 2026 · Tags: Denial of service - [Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding](https://agentprime.io/advisories/CVE-2026-17557.md) `CVE-2026-17557` · CVE record: Red Hat Red Hat OpenShift AI (RHOAI) · CVSS 6.5 Medium · Not analysed yet · Published 21 Oct 2026 · Tags: Server-side request forgery (SSRF) - [Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway p…](https://agentprime.io/advisories/CVE-2026-108334.md) `CVE-2026-108334` · CVE record: Red Hat Red Hat Connectivity Link 1.4 and 3 more · CVSS 7.4 High · Not analysed yet · Published 15 Oct 2026 · Tags: Code injection - [Gcc-toolset-15-gcc: gcc: gcc-toolset-16: gcc: denial of service via use-after-free in binary heap erase_if](https://agentprime.io/advisories/CVE-2026-102010.md) `CVE-2026-102010` · CVE record: Red Hat Red Hat Enterprise Linux 10 and 4 more · CVSS 7.0 High · Not analysed yet · Published 28 Sept 2026 · Tags: Memory corruption - [Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security](https://agentprime.io/advisories/CVE-2026-87743.md) `CVE-2026-87743` · CVE record: Red Hat Red Hat build of Quarkus 3.27.5.SP2 and 4 more · CVSS 7.5 High · Not analysed yet · Published 18 Sept 2026 · Tags: CWE-551 - [Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array](https://agentprime.io/advisories/CVE-2026-92091.md) `CVE-2026-92091` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 16 Sept 2026 · Tags: Denial of service - [Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user](https://agentprime.io/advisories/CVE-2026-86332.md) `CVE-2026-86332` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 6.5 Medium · Not analysed yet · Published 7 Sept 2026 · Tags: Broken access control - [Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification](https://agentprime.io/advisories/CVE-2026-84185.md) `CVE-2026-84185` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 3 Sept 2026 · Tags: Weak cryptography or TLS - [Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor](https://agentprime.io/advisories/CVE-2026-18393.md) `CVE-2026-18393` · CVE record: Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 and 1 more · CVSS 5.4 Medium · Not analysed yet · Published 28 Aug 2026 · Tags: Memory corruption - [Jwcrypto: jwcrypto: denial of service via malformed jwe tokens](https://agentprime.io/advisories/CVE-2026-80179.md) `CVE-2026-80179` · CVE record: Red Hat Red Hat Ansible Automation Platform 2 and 4 more · CVSS 5.9 Medium · Not analysed yet · Published 27 Aug 2026 · Tags: Denial of service - [Vim: vimscript injection via unescaped filename in netrw s:netrwmarkfile() filter() expression allows arbitrary code execution](https://agentprime.io/advisories/CVE-2026-43961.md) `CVE-2026-43961` · CVE record: vim vim and 4 more · CVSS 7.8 High · Not analysed yet · Published 19 Aug 2026 · Tags: Code injection - [Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation](https://agentprime.io/advisories/CVE-2026-18950.md) `CVE-2026-18950` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 8.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: Privilege escalation - [Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization](https://agentprime.io/advisories/CVE-2026-18947.md) `CVE-2026-18947` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 8.5 High · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control - [Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation](https://agentprime.io/advisories/CVE-2026-18942.md) `CVE-2026-18942` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 5.5 Medium · Not analysed yet · Published 10 Aug 2026 · Tags: Code injection - [Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication](https://agentprime.io/advisories/CVE-2026-18941.md) `CVE-2026-18941` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 3 more · CVSS 7.7 High · Not analysed yet · Published 10 Aug 2026 · Tags: Authentication bypass - [Maas-billing: maas api: privilege escalation via forged http headers due to missing authentication](https://agentprime.io/advisories/CVE-2026-14450.md) `CVE-2026-14450` · CVE record: Red Hat Red Hat OpenShift AI 3.4 and 1 more · CVSS 9.9 Critical · Critical (CVSS 9+) · Not analysed yet · Published 10 Aug 2026 · Tags: Authentication bypass - [Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)](https://agentprime.io/advisories/CVE-2026-13717.md) `CVE-2026-13717` · CVE record: Red Hat Red Hat OpenShift AI 3.4 and 1 more · CVSS 8.8 High · Not analysed yet · Published 10 Aug 2026 · Tags: Broken access control - [Feast: resource exhaustion via websocket endpoint](https://agentprime.io/advisories/CVE-2026-23538.md) `CVE-2026-23538` · CVE record: Feast Feast Feature Server and 1 more · CVSS 7.5 High · Not analysed yet · Published 16 Jul 2026 · Tags: Denial of service - [Trustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabled](https://agentprime.io/advisories/CVE-2026-15063.md) `CVE-2026-15063` · CVE record: trustyai-explainability trustyai-service-operator and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Authentication bypass - [Trustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apis](https://agentprime.io/advisories/CVE-2026-15044.md) `CVE-2026-15044` · CVE record: TrustyAI trustyai-service-operator and 1 more · CVSS 6.3 Medium · Not analysed yet · Published 8 Jul 2026 · Tags: Information disclosure, Authentication bypass - [Feast: unauthenticated arbitrary file write](https://agentprime.io/advisories/CVE-2026-23537.md) `CVE-2026-23537` · CVE record: Feast Feast Feature Server and 1 more · CVSS 9.1 Critical · Critical (CVSS 9+) · Not analysed yet · Published 1 Jul 2026 · Tags: Broken access control - [Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames](https://agentprime.io/advisories/CVE-2026-56211.md) `CVE-2026-56211` · CVE record: Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id](https://agentprime.io/advisories/CVE-2026-56210.md) `CVE-2026-56210` · CVE record: Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack](https://agentprime.io/advisories/CVE-2026-56209.md) `CVE-2026-56209` · CVE record: Red Hat Red Hat Enterprise Linux AI 3.3 for RHEL 9 and 4 more · CVSS 7.1 High · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Ffmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move()](https://agentprime.io/advisories/CVE-2026-12706.md) `CVE-2026-12706` · CVE record: Red Hat Red Hat Enterprise Linux AI (RHEL AI) 3 and 1 more · CVSS 6.5 Medium · Not analysed yet · Published 19 Jun 2026 · Tags: Memory corruption - [Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser](https://agentprime.io/advisories/CVE-2026-6385.md) `CVE-2026-6385` · CVE record: Red Hat Lightspeed Core and 3 more · CVSS 6.5 Medium · Not analysed yet · Published 15 Apr 2026 · Tags: Memory corruption - [Odh-dashboard: odh dashboard kubernetes service account exposure](https://agentprime.io/advisories/CVE-2026-5483.md) `CVE-2026-5483` · CVE record: Red Hat Red Hat OpenShift AI 2.16 and 4 more · CVSS 8.5 High · Not analysed yet · Published 10 Apr 2026 · Tags: Information disclosure - [Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy](https://agentprime.io/advisories/CVE-2025-12805.md) `CVE-2025-12805` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 1 more · CVSS 8.1 High · Not analysed yet · Published 26 Mar 2026 · Tags: CWE-653 - [Feast: unauthenticated arbitrary file read](https://agentprime.io/advisories/CVE-2026-23536.md) `CVE-2026-23536` · CVE record: Red Hat Red Hat OpenShift AI (RHOAI) · CVSS 7.5 High · Not analysed yet · Published 20 Mar 2026 · Tags: Path traversal - [Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace](https://agentprime.io/advisories/CVE-2025-12103.md) `CVE-2025-12103` · CVE record: Red Hat Red Hat OpenShift AI 2.25 and 2 more · CVSS 5.0 Medium · Not analysed yet · Published 28 Oct 2025 · Tags: Privilege escalation - [Trustyai-explainability: command injection via lmevaljob cr](https://agentprime.io/advisories/CVE-2025-6193.md) `CVE-2025-6193` · CVE record: Red Hat Red Hat OpenShift AI 2.16 and 1 more · CVSS 5.9 Medium · Not analysed yet · Published 20 Jun 2025 · Tags: Command injection ## Filters and formats Filters are query parameters on this URL: `q` (words, as in a web search engine: `"a phrase"`, `OR`, `-word`; an id; a package or product name), `severity` (low, medium, high or critical), `critical=1`, `kev=1`, `ecosystem` (npm, pypi, packagist, go, maven, rubygems, crates, nuget, hex), `kind=package`, `assigner` (a CNA’s short name), `min_score` and `state`. Each record’s title links to its Markdown page. - The same list as JSON: - Every list: , critical: ; by weakness: and the other tags in ; by technology: `/advisories/technology/.md` (`fortinet-fortimail`) --- The web page: . Everything for agents: .