Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-13451— Kserve: kserve: server-side request forgery via malicious storageuri

Quick assessment

Affected
Red Hat Red Hat OpenShift AI (RHOAI)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 KServe 中发现了一个漏洞。拥有对 InferenceService 自定义资源（Custom Resources）创建或更新权限的命名空间级用户，可通过提供恶意的 利用此漏洞。该服务端请求伪造（SSRF）漏洞允许 初始化容器从集群内部发起任意的出站 HTTP/HTTPS 请求。这可能导致信息泄露，包括窃取节点的身份与访问管理（IAM）角色的凭据，或访问集群内部服务。

CVSS 7.7 · High
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-13451

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Kserve: kserve: server-side request forgery via malicious storageuri
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF) vulnerability allows the `storage-initializer` init container to issue arbitrary outbound HTTP/HTTPS requests from inside the cluster. This can lead to information disclosure, including credential theft for the node's Identity and Access Management (IAM) role or access to internal cluster services.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat OpenShift AI (RHOAI) - cpe:/a:redhat:openshift_ai
Red Hat Red Hat OpenShift AI (RHOAI) - cpe:/a:redhat:openshift_ai
Red Hat Red Hat OpenShift AI (RHOAI) - cpe:/a:redhat:openshift_ai
Red Hat Red Hat OpenShift AI (RHOAI) - cpe:/a:redhat:openshift_ai
Red Hat Red Hat OpenShift AI (RHOAI) - cpe:/a:redhat:openshift_ai

II. Public POCs for CVE-2026-13451

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-13451

请登录查看更多情报信息。

Other References for CVE-2026-13451 (2)

Same Patch Batch · Red Hat · 2026-10-28 · 3 CVEs total

CVE-2026-117574 9.1 CRITICAL Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection
CVE-2026-84725 8.1 HIGH Openjdk-orb: incomplete fix for cve-2026-15560,unauthed class loading via iiop in eap

IV. Related Vulnerabilities

Same product: Red Hat OpenShift AI (RHOAI)
Same vendor: Red Hat
Same weakness: CWE-918