Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-16745— Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation

Quick assessment

Affected
Red Hat Red Hat OpenShift AI 2.25
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

Red Hat OpenShift AI是美国Red Hat公司的一款信息化产品。 Red Hat OpenShift AI存在输入验证错误漏洞，该漏洞源于网络绑定错误，可能导致集群内的恶意行为者绕过身份验证并通过提供任意访问令牌冒充任何用户，从而未经授权访问Kubernetes API，可能导致任意代码执行、权限提升或信息泄露。

CVSS 8.8 · High EPSS 0.45% · P37

Affected Version Matrix 6

VendorProduct Version RangeStatus
Red Hat Red Hat OpenShift AI 2.25 1785940823< * unaffected
1788312226< * unaffected
Red Hat Red Hat OpenShift AI 3.3 1786109683< * unaffected
1790128681< * unaffected
Red Hat Red Hat OpenShift AI 3.4 1786109665< * unaffected
1787347991< * unaffected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-16745

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Odh-dashboard: odh-dashboard: backend port 8080 trusts x-forwarded-access-token without origin validation
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI). Due to incorrect network binding, a malicious actor within the cluster can bypass authentication and impersonate any user by providing an arbitrary access token. This allows an attacker to gain unauthorized access to the Kubernetes API, potentially leading to arbitrary code execution, privilege escalation, or information disclosure.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Source: CVE Program / CVE List V5
Vulnerability Type
源验证错误
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat OpenShift AI 输入验证错误漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat OpenShift AI是美国Red Hat公司的一款信息化产品。 Red Hat OpenShift AI存在输入验证错误漏洞，该漏洞源于网络绑定错误，可能导致集群内的恶意行为者绕过身份验证并通过提供任意访问令牌冒充任何用户，从而未经授权访问Kubernetes API，可能导致任意代码执行、权限提升或信息泄露。
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat OpenShift AI 2.25 1785940823 ~ * cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat Red Hat OpenShift AI 2.25 1788312226 ~ * cpe:/a:redhat:openshift_ai:2.25::el9
Red Hat Red Hat OpenShift AI 3.3 1786109683 ~ * cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat Red Hat OpenShift AI 3.3 1790128681 ~ * cpe:/a:redhat:openshift_ai:3.3::el9
Red Hat Red Hat OpenShift AI 3.4 1786109665 ~ * cpe:/a:redhat:openshift_ai:3.4::el9
Red Hat Red Hat OpenShift AI 3.4 1787347991 ~ * cpe:/a:redhat:openshift_ai:3.4::el9

II. Public POCs for CVE-2026-16745

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-16745

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-16745 (7)

Other References for CVE-2026-16745 (1)

Same Patch Batch · Red Hat · 2026-07-23 · 4 CVEs total

CVE-2026-64611 7.5 HIGH Libcupsfilters: cups-filters: libcupsfilters: cpu exhaustion via infinite loop in cfieee12
CVE-2026-6390 6.8 MEDIUM Nano: gnu nano: arbitrary memory writes, information disclosure, or denial of service via
CVE-2026-12353 5.3 MEDIUM Rhcs: memory leak during https connection leads to denial of service

IV. Related Vulnerabilities

Same product: Red Hat OpenShift AI 2.25
Same vendor: Red Hat
Same weakness: CWE-346

V. Comments for CVE-2026-16745

No comments yet

Leave a comment