CVE-2026-86332— Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user
Quick assessment
Affected
Red Hat Red Hat OpenShift AI (RHOAI)
Exploitation
No confirmed in-the-wild exploitation; assess based on exposure
Recommended action
Check the vendor advisory and references for a fixed version. If immediate upgrade is impossible, restrict exposure and increase monitoring.
在 Red Hat OpenShift AI 的 odh-dashboard 中发现了一个缺陷。其后端对前端（BFF）的 API 路由 使用 dashboard 的服务账户（Service Account）读取 Kubernetes Secret，并返回完整的 Secret 对象（包括 字段），但未进行任何授权检查。任何已认证的 dashboard 用户均可获取集群中的 NVIDIA NGC API 密钥 Secret（ ）以及 NIM 镜像拉取密钥（ ）。虽然对上述 NIM 凭据的创建和删除操作受管理员权限控制，
Possible ATT&CK Techniques 3 AI
T1210 · Exploitation of Remote Services T1528 · Steal Application Access Token T1552 · Unsecured Credentials
Get alerts for future matching vulnerabilities
Log in to subscribe
I. Basic Information for CVE-2026-86332
Vulnerability Information
Have questions about the vulnerability? See if Shenlong's analysis helps!
View Shenlong Deep Dive ↗
Although we use advanced large model technology, its output may still contain inaccurate or outdated information.Shenlong tries to ensure data accuracy, but please verify and judge based on the actual situation.
Vulnerability Title
Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user
Source: CVE Program / CVE List V5
Vulnerability Description
A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).
Source: CVE Program / CVE List V5
CVSS Information
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N
Source: CVE Program / CVE List V5
Vulnerability Type
授权机制缺失
Source: CVE Program / CVE List V5
Affected Products
| Vendor | Product | Affected Versions | CPE | Subscribe |
|---|---|---|---|---|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
| Red Hat | Red Hat OpenShift AI (RHOAI) | - |
cpe:/a:redhat:openshift_ai
|
|
II. Public POCs for CVE-2026-86332
| # | POC Description | Source Link | Shenlong Link |
|---|
AI-Generated POC
Premium
No public POC found.
Login to generate AI POCIII. Intelligence Information for CVE-2026-86332
请登录查看更多情报信息。
Other References for CVE-2026-86332 (2)
IV. Related Vulnerabilities
Same vendor: Red Hat
-
CVE-2026-76925
Flatpak: flatpak: toctou race condition allows symlink redir -
CVE-2026-85769
Libtpms: libtpms: heap out-of-bounds read in tpm2 state unma -
CVE-2026-85534
Libsoup: libsoup: http/2 client crash in on_data_source_read -
CVE-2026-81666
Corosync: corosync: integer overflow in check_memb_commit_to -
CVE-2026-81665
Corosync: corosync: heap-based buffer overflow in totempg as
Same weakness: CWE-862
-
CVE-2026-86342
MISP Freetext Feed Preview Improper Authorization Exposes Re -
CVE-2026-86274
projeto-siga Authentication Flow ExAutenticacaoController.ja -
CVE-2026-86271
FluentCMS PermissionManager.cs GetAccessible authorization -
CVE-2026-86283
MISP UiBeta Collection View Bypasses Event ACL, Exposing Una -
CVE-2026-86254
wger Incomplete Authorization Fix Cross-Tenant Account Delet
V. Comments for CVE-2026-86332
No comments yet