Red Hat OpenShift AI (RHOAI).

Io.quarkus/quarkus-vertx-http: quarkus-vertx-http: authorization bypass in management interface via path concatenation flaw

• Red Hat Exploit Intelligence
• Red Hat OpenShift Serverless
• Broken access control

Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization

• Red Hat OpenShift AI (RHOAI)
• Broken access control

Kserve: kserve: server-side request forgery via malicious storageuri

• Red Hat OpenShift AI (RHOAI)
• Server-side request forgery (SSRF)

Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompressedlayer on malformed layers

• Red Hat Confidential Compute Attestation
• Red Hat DPU kit for NVIDIA
• Denial of service

Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding

• Red Hat OpenShift AI (RHOAI)
• Server-side request forgery (SSRF)

Github.com/kuadrant/kuadrant-operator/internal/wasm: github.com/rh-api-management/rhcl-operator-product-build/kuadrant-operator: kuadrant-operator: crafted httproute match values can bypass gateway p…

• Red Hat Connectivity Link 1.4
• Red Hat Connectivity Link 1.5
• Code injection

Quarkus-vertx-http: authorization bypass via path normalization discrepancy in quarkus http security

• Red Hat build of Quarkus 3.27.5.SP2
• Red Hat build of Quarkus 3.33.3.SP2
• CWE-551

Jwcrypto: jwcrypto: denial of service via o(n^2) duplicate check on unbounded jwk key_ops array

• Red Hat Ansible Automation Platform 2
• Red Hat Enterprise Linux 10
• Denial of service

Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.5
• Broken access control

Jwcrypto: jwcrypto: general json jws kid binding bypass during jwkset verification

• Red Hat Ansible Automation Platform 2
• Red Hat Enterprise Linux 10
• Weak cryptography or TLS

Ffmpeg: ffmpeg: heap buffer overflow in tdsc_load_cursor() via cur_fmt_mono cursor

• Red Hat Enterprise Linux AI (RHEL AI) 3
• Red Hat OpenShift AI (RHOAI)
• Memory corruption

Jwcrypto: jwcrypto: denial of service via malformed jwe tokens

• Red Hat Ansible Automation Platform 2
• Red Hat Enterprise Linux 10
• Denial of service

Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Privilege escalation

Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized full re-materialization

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Broken access control

Feast-operator: feast: feast apply cronjob runs user python with feature-server sa — tenant code to sa token escalation

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.4
• Code injection

Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant instances deployed without authentication

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.3
• Authentication bypass

Maas-billing: maas api: privilege escalation via forged http headers due to missing authentication

• Red Hat OpenShift AI 3.4
• Red Hat OpenShift AI (RHOAI)
• Authentication bypass

Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)

• Red Hat OpenShift AI 3.4
• Red Hat OpenShift AI (RHOAI)
• Broken access control

Feast: resource exhaustion via websocket endpoint

• Feast Feature Server
• Red Hat OpenShift AI (RHOAI)
• Denial of service

Trustyai-service-operator: trustyai service operator: gorch port bypass when auth is enabled

• trustyai-explainability trustyai-service-operator
• Red Hat OpenShift AI (RHOAI)
• Authentication bypass

Trustyai-service-operator: trustyai service operator: unauthenticated access to ai guardrails and orchestrator apis

• trustyai-service-operator
• Red Hat OpenShift AI (RHOAI)
• Information disclosure
• Authentication bypass

Feast: unauthenticated arbitrary file write

• Feast Feature Server
• Red Hat OpenShift AI (RHOAI)
• Broken access control

Libaom: libaom: remote code execution via svc layer context handling with attacker-controlled frames

• Red Hat Enterprise Linux AI 3.3 for RHEL 9
• Red Hat Enterprise Linux AI 3.4 for RHEL 9
• Memory corruption

Libaom: libaom: heap-buffer-overflow read via missing bounds check in ctrl_set_layer_id

• Red Hat Enterprise Linux AI 3.3 for RHEL 9
• Red Hat Enterprise Linux AI 3.4 for RHEL 9
• Memory corruption

Libaom: libaom: arbitrary address write via svc layer context oob and cyclic refresh map pointer hijack

• Red Hat Enterprise Linux AI 3.3 for RHEL 9
• Red Hat Enterprise Linux AI 3.4 for RHEL 9
• Memory corruption

Ffmpeg: ffmpeg: heap use-after-free read in rasc decoder decode_move()

• Red Hat Enterprise Linux AI (RHEL AI) 3
• Red Hat OpenShift AI (RHOAI)
• Memory corruption

Ffmpeg: ffmpeg: denial of service and potential arbitrary code execution via signed integer overflow in dvd subtitle parser

• Red Hat Lightspeed Core
• Red Hat AI Inference Server
• Memory corruption

Odh-dashboard: odh dashboard kubernetes service account exposure

• Red Hat OpenShift AI 2.16
• Red Hat OpenShift AI 2.25
• Information disclosure

Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI (RHOAI)
• CWE-653

Feast: unauthenticated arbitrary file read

• Red Hat OpenShift AI (RHOAI)
• Path traversal

Openshift-ai: trusty ai grants all authenticated users to list pods in any namespace

• Red Hat OpenShift AI 2.25
• Red Hat OpenShift AI 3.0
• Privilege escalation

Trustyai-explainability: command injection via lmevaljob cr

• Red Hat OpenShift AI 2.16
• Red Hat OpenShift AI (RHOAI)
• Command injection