CVE-2026-15581— Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide
Quick assessment
Affected
Red Hat Red Hat OpenShift AI 2.25
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
TrustyAI Service Operator是TrustyAI组织的一款机器学习服务运营软件。 TrustyAI Service Operator存在授权问题漏洞，该漏洞源于身份验证绕过，允许集群网络上的任意pod直接访问后端API，攻击者可利用该漏洞读取、篡改或删除监控数据和配置，并注入任意数据，可能破坏租户操作。
Possible ATT&CK Techniques 1 AI
T1078 · Valid AccountsAffected Version Matrix 7
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat OpenShift AI 2.25 | 1785187119< * |
unaffected |
1787330073< * |
unaffected | ||
| Red Hat | Red Hat OpenShift AI 3.3 | 1785187521< * |
unaffected |
| Red Hat | Red Hat OpenShift AI 3.4 | 1784993206< * |
unaffected |
1786614608< * |
unaffected | ||
| Red Hat | Red Hat OpenShift AI 3.5 | 1786552271< * |
unaffected |
1786552250< * |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-15581
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the TrustyAI Service (TAS) deployment. This vulnerability allows any pod on the cluster network to bypass authentication and directly access the TAS backend API. An attacker can exploit this to read, tamper with, or delete monitoring data and configurations, and inject arbitrary data into the service, potentially disrupting tenant operations.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:A/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
关键功能的认证机制缺失
Source: CVE Program / CVE List V5
Vulnerability Title
TrustyAI Service Operator 授权问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
TrustyAI Service Operator是TrustyAI组织的一款机器学习服务运营软件。 TrustyAI Service Operator存在授权问题漏洞，该漏洞源于身份验证绕过，允许集群网络上的任意pod直接访问后端API，攻击者可利用该漏洞读取、篡改或删除监控数据和配置，并注入任意数据，可能破坏租户操作。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat OpenShift AI 2.25 | 1785187119 ~ * |
cpe:/a:redhat:openshift_ai:2.25::el9
|
|
| Red Hat | Red Hat OpenShift AI 2.25 | 1787330073 ~ * |
cpe:/a:redhat:openshift_ai:2.25::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.3 | 1785187521 ~ * |
cpe:/a:redhat:openshift_ai:3.3::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.4 | 1784993206 ~ * |
cpe:/a:redhat:openshift_ai:3.4::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.4 | 1786614608 ~ * |
cpe:/a:redhat:openshift_ai:3.4::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.5 | 1786552271 ~ * |
cpe:/a:redhat:openshift_ai:3.5::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.5 | 1786552250 ~ * |
cpe:/a:redhat:openshift_ai:3.5::el9
|
|
II. Public POCs for CVE-2026-15581
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-15581
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-15581 (7)
-
-
-
-
-
-
🔗 RHSA-2026:53261 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
Other References for CVE-2026-15581 (1)
Same Patch Batch · Red Hat · 2026-08-10 · 28 CVEs total
| CVE-2026-18948 | 9.9 CRITICAL | Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server |
| CVE-2026-14450 | 9.9 CRITICAL | Maas-billing: maas api: privilege escalation via forged http headers due to missing authen |
| CVE-2026-18982 | 8.8 HIGH | Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/ad |
| CVE-2026-18950 | 8.8 HIGH | Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref i |
| CVE-2026-18949 | 8.8 HIGH | Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac man |
| CVE-2026-18951 | 8.8 HIGH | Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainj |
| CVE-2026-18617 | 8.8 HIGH | Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams |
| CVE-2026-18608 | 8.7 HIGH | Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.o |
| CVE-2026-71576 | 8.5 HIGH | Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source( |
| CVE-2026-18947 | 8.5 HIGH | Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized |
| CVE-2026-15467 | 8.1 HIGH | Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass |
| CVE-2026-63622 | 7.8 HIGH | Libvirt: swtpm privilege escalation via symlink following |
| CVE-2026-18941 | 7.7 HIGH | Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant |
| CVE-2026-18621 | 7.6 HIGH | Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypass |
| CVE-2026-19387 | 7.6 HIGH | Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec im |
| CVE-2026-18611 | 7.5 HIGH | Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand |
| CVE-2026-18618 | 7.5 HIGH | Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable |
| CVE-2026-19389 | 7.1 HIGH | Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux |
| CVE-2026-18620 | 7.1 HIGH | Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authoriza |
| CVE-2026-19278 | 6.8 MEDIUM | Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m ro |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Red Hat OpenShift AI 2.25
-
CVE-2026-18620
Data-sciences-pipeline: user-controlled serviceaccount for w -
CVE-2026-18618
Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 -
CVE-2026-18611
Data-science-pipelines-operator: dspo: cryptographically wea -
CVE-2026-18982
Odh-training-operator-rhel9: rhoai fork aggregates training -
CVE-2026-18950
Odh-dashboard: odh-dashboard: confused-deputy privilege esca
Same vendor: Red Hat
-
CVE-2026-104988
Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentic -
CVE-2026-95512
Freetype: freetype: denial of service via repeated subroutin -
CVE-2026-86345
389-ds-base: 389-ds-base: starttls plaintext-buffer retentio -
CVE-2026-86344
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool -
CVE-2026-103884
Keycloak-services: keycloak-services: path traversal in x.50
Same weakness: CWE-306
-
CVE-2026-105115
OpenAM before 16.1.3 Unauthenticated Arbitrary Class Instant -
CVE-2026-105105
Unauthenticated ZeroMQ command/telemetry bus in AIT-Core all -
CVE-2026-105049
Zilliz Attu<3.0.0 Playground未授权访问漏洞 -
CVE-2026-95102
Monta monta.app Missing Authentication for Critical Function -
CVE-2026-82042
UTMStack < 11.2.16 Authentication Bypass via InternalApiKeyF
V. Comments for CVE-2026-15581
No comments yet