Goal Reached Thanks to every supporter — we hit 100%!

Goal: 1000 CNY · Raised: 1359 CNY

100%
Buy Us a Coffee

CVE-2026-17557— Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding

Quick assessment

Affected
Red Hat Red Hat OpenShift AI (RHOAI)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.

在 Red Hat OpenShift AI 的 组件中发现了一个漏洞。已认证且能够提交评估作业的用户，可通过在 中提供恶意的模型 URL 利用该漏洞。此漏洞可能导致租户的模型认证密钥被泄露给攻击者控制的外部监听器，同时还可针对评估作业 Pod 可访问的内部网络端点发起服务器端请求伪造（SSRF）攻击。

CVSS 6.5 · Medium EPSS 0.26% · P16

Affected Version Matrix 1

VendorProduct Version RangeStatus
Red Hat Red Hat OpenShift AI (RHOAI) any affected
Get alerts for future matching vulnerabilities Log in to subscribe

I. Basic Information for CVE-2026-17557

Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗

Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.

Vulnerability Title
Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malicious model URL in the `JobSpec`. This vulnerability allows for the disclosure of the tenant's model authentication secret to an attacker-controlled external listener. Additionally, it enables Server-Side Request Forgery (SSRF) attacks against internal network endpoints reachable from the evaluation job pod.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
服务端请求伪造(SSRF)
Source: CVE Program / CVE List V5

Affected Products

Vendor Product Affected Versions CPE Subscribe
Red Hat Red Hat OpenShift AI (RHOAI) - cpe:/a:redhat:openshift_ai

II. Public POCs for CVE-2026-17557

# POC Description Source Link Shenlong Link
AI-Generated POC Premium

No public POC found.

Login to generate AI POC

III. Intelligence Information for CVE-2026-17557

请登录查看更多情报信息。

Vendor Advisories for CVE-2026-17557 (2)

Same Patch Batch · Red Hat · 2026-10-21 · 11 CVEs total

CVE-2026-110744 7.2 HIGH Multicluster-global-hub-operator-bundle: operator serviceaccount granted unrestricted impe
CVE-2026-114406 6.8 MEDIUM Ca-certificates: distrust emudhra intermediate ca certificates due to security concerns
CVE-2026-92824 6.2 MEDIUM Libmodulemd: libmodulemd: out-of-bounds read when emitting rpm-map artifacts
CVE-2026-92822 6.2 MEDIUM Libmodulemd: libmodulemd: unbounded recursion when parsing nested xmd yaml
CVE-2026-92823 6.2 MEDIUM Libmodulemd: libmodulemd: missing decompressed-size limit when parsing compressed yaml
CVE-2026-85518 6.1 MEDIUM Openscap: openscap: arbitrary file write via path traversal in source datastream decomposi
CVE-2026-114038 5.1 MEDIUM Device-mapper-multipath: device-mapper-multipath: information disclosure via malformed for
CVE-2026-114438 4.2 MEDIUM Keycloak-services: keycloak-services: required otp enrollment bypassed via update user loc
CVE-2026-114370 3.7 LOW Undertow: undertow: pathresourcemanager safepaths check allows sibling-directory symlink t
CVE-2026-114236 3.3 LOW Podman: goroutine/file-descriptor leak in storage/pkg/archive.applylayer and applyuncompre

IV. Related Vulnerabilities

Same product: Red Hat OpenShift AI (RHOAI)
Same vendor: Red Hat
Same weakness: CWE-918

V. Comments for CVE-2026-17557

No comments yet

Leave a comment