CVE-2026-18608— Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide
Quick assessment
Affected
Red Hat Red Hat OpenShift AI 2.25
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
Red Hat OpenShift AI是美国Red Hat公司的一款混合云人工智能平台，为数据科学家和开发者提供跨混合云环境构建、开发、训练、部署、服务和监控机器学习（ML）模型及 AI 应用的全生命周期工具。 Red Hat OpenShift AI存在权限许可和访问控制问题漏洞，该漏洞源于Data Science Pipelines Operator (DSPO)的ClusterRole权限过大，包含执行命令和管理集群级角色等超出必要范围的权限，可能导致攻击者利用这些权限获得整个Kubernetes
Possible ATT&CK Techniques 2 AI
T1098 · Account Manipulation T1548 · Abuse Elevation Control MechanismAffected Version Matrix 7
| Vendor | Product | Version Range | Status |
|---|---|---|---|
| Red Hat | Red Hat OpenShift AI 2.25 | 1785189332< * |
unaffected |
1788182334< * |
unaffected | ||
| Red Hat | Red Hat OpenShift AI 3.3 | 1785187936< * |
unaffected |
| Red Hat | Red Hat OpenShift AI 3.4 | 1784833428< * |
unaffected |
1787002057< * |
unaffected | ||
| Red Hat | Red Hat OpenShift AI 3.5 | 1786552271< * |
unaffected |
1786552250< * |
unaffected |
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-18608
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Data-science-pipelines-operator: dspo: operator clusterrole grants pods/exec:*, kubeflow.org */*, and clusterrole/binding crud cluster-wide
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wide roles, could be exploited. If the DSPO pod were compromised, an attacker could leverage these privileges to gain full administrative control over the entire Kubernetes cluster.
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
带着不必要的权限执行
Source: CVE Program / CVE List V5
Vulnerability Title
Red Hat OpenShift AI 权限许可和访问控制问题漏洞
Source: CNNVD (China National Vulnerability Database)
Vulnerability Description
Red Hat OpenShift AI是美国Red Hat公司的一款混合云人工智能平台，为数据科学家和开发者提供跨混合云环境构建、开发、训练、部署、服务和监控机器学习（ML）模型及 AI 应用的全生命周期工具。 Red Hat OpenShift AI存在权限许可和访问控制问题漏洞，该漏洞源于Data Science Pipelines Operator (DSPO)的ClusterRole权限过大，包含执行命令和管理集群级角色等超出必要范围的权限，可能导致攻击者利用这些权限获得整个Kubernetes
Source: CNNVD (China National Vulnerability Database)
CVSS Information
N/A
Source: CNNVD (China National Vulnerability Database)
Vulnerability Type
N/A
Source: CNNVD (China National Vulnerability Database)
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat OpenShift AI 2.25 | 1785189332 ~ * |
cpe:/a:redhat:openshift_ai:2.25::el9
|
|
| Red Hat | Red Hat OpenShift AI 2.25 | 1788182334 ~ * |
cpe:/a:redhat:openshift_ai:2.25::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.3 | 1785187936 ~ * |
cpe:/a:redhat:openshift_ai:3.3::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.4 | 1784833428 ~ * |
cpe:/a:redhat:openshift_ai:3.4::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.4 | 1787002057 ~ * |
cpe:/a:redhat:openshift_ai:3.4::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.5 | 1786552271 ~ * |
cpe:/a:redhat:openshift_ai:3.5::el9
|
|
| Red Hat | Red Hat OpenShift AI 3.5 | 1786552250 ~ * |
cpe:/a:redhat:openshift_ai:3.5::el9
|
|
II. Public POCs for CVE-2026-18608
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-18608
请登录查看更多情报信息。
Vendor Advisories for CVE-2026-18608 (7)
-
-
-
-
-
-
🔗 RHSA-2026:53261 - Security Advisory - Red Hat Customer Portal Read full article vendor-advisory x_refsource_REDHAT
-
Other References for CVE-2026-18608 (1)
Same Patch Batch · Red Hat · 2026-08-10 · 28 CVEs total
| CVE-2026-18948 | 9.9 CRITICAL | Feast: feast: unsafe dill deserialization of registry-stored udfs — rce on feature server |
| CVE-2026-14450 | 9.9 CRITICAL | Maas-billing: maas api: privilege escalation via forged http headers due to missing authen |
| CVE-2026-18950 | 8.8 HIGH | Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref i |
| CVE-2026-18949 | 8.8 HIGH | Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac man |
| CVE-2026-18951 | 8.8 HIGH | Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainj |
| CVE-2026-18617 | 8.8 HIGH | Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams |
| CVE-2026-18982 | 8.8 HIGH | Odh-training-operator-rhel9: rhoai fork aggregates training job create onto native edit/ad |
| CVE-2026-71576 | 8.5 HIGH | Multicluster-global-hub: multicluster-global-hub: manager trusts self-asserted evt.source( |
| CVE-2026-18947 | 8.5 HIGH | Feast: feast: authorization bypass in /materialize endpoints enables dos via unauthorized |
| CVE-2026-15467 | 8.1 HIGH | Trustyai-service-operator: trustyai-service-operator: lmevaljob sidecar containers bypass |
| CVE-2026-15581 | 8.0 HIGH | Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-r |
| CVE-2026-63622 | 7.8 HIGH | Libvirt: swtpm privilege escalation via symlink following |
| CVE-2026-18941 | 7.7 HIGH | Feast: feast-operator: feast: default authentication mode is no_auth — shared multi-tenant |
| CVE-2026-18621 | 7.6 HIGH | Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypass |
| CVE-2026-19387 | 7.6 HIGH | Gstreamer: gstreamer1-plugins-bad-free: gstreamer: heap out-of-bounds write in adpcmdec im |
| CVE-2026-18611 | 7.5 HIGH | Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand |
| CVE-2026-18618 | 7.5 HIGH | Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 dos cves — directly reachable |
| CVE-2026-19389 | 7.1 HIGH | Gstreamer: gstreamer1-plugins-ugly-free: gstreamer: integer overflow/underflow in asfdemux |
| CVE-2026-18620 | 7.1 HIGH | Data-sciences-pipeline: user-controlled serviceaccount for workflow pods without authoriza |
| CVE-2026-19278 | 6.8 MEDIUM | Stackrox: stackrox: privilege escalation via unanchored regular expressions in auth m2m ro |
Showing top 20 of 28 CVEs. View all on vendor page → →
IV. Related Vulnerabilities
Same product: Red Hat OpenShift AI 2.25
-
CVE-2026-18620
Data-sciences-pipeline: user-controlled serviceaccount for w -
CVE-2026-18618
Ml-metdata: bundled grpc 1.46.3 (2022) with published http/2 -
CVE-2026-18611
Data-science-pipelines-operator: dspo: cryptographically wea -
CVE-2026-18982
Odh-training-operator-rhel9: rhoai fork aggregates training -
CVE-2026-18950
Odh-dashboard: odh-dashboard: confused-deputy privilege esca
Same vendor: Red Hat
-
CVE-2026-104988
Pki-core: dogtag-pki: redhat-pki: pki: est fullcmc authentic -
CVE-2026-95512
Freetype: freetype: denial of service via repeated subroutin -
CVE-2026-86345
389-ds-base: 389-ds-base: starttls plaintext-buffer retentio -
CVE-2026-86344
389-ds-base: 389-ds-base: unauthenticated worker-thread-pool -
CVE-2026-103884
Keycloak-services: keycloak-services: path traversal in x.50
Same weakness: CWE-250
-
CVE-2026-66246
HCL iControl is affected by multiple security vulnerabilitie -
CVE-2026-53605
Reachy Mini Wireless: Local Privilege Escalation via Unrestr -
CVE-2026-102247
FastAdmin Database Management database.php unnecessary privi -
CVE-2026-88808
Fleet agent copies downstream resources with cluster-admin p -
CVE-2026-87899
cPanel提权漏洞：远程用户可获Root权限执行代码
V. Comments for CVE-2026-18608
No comments yet