9.9

CVE-2026-5483

Odh-dashboard: odh dashboard kubernetes service account exposure

A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Daten sind bereitgestellt durch National Vulnerability Database (NVD)
Redhat ≫ Openshift Ai Version >= 2.16 < 2.16.4
Redhat ≫ Openshift Ai Version >= 2.25 < 2.25.4
Redhat ≫ Openshift Ai Version3.2
Redhat ≫ Openshift Ai Version3.3
VulnDex Vulnerability Enrichment
Diese Information steht angemeldeten Benutzern zur Verfügung. Login Login
Zu dieser CVE wurde keine Warnung gefunden.
EPSS Metriken
Typ Quelle Score Percentile
EPSS FIRST.org 0.49% 0.385
CVSS Metriken
Quelle Base Score Exploit Score Impact Score Vector String
nvd@nist.gov 9.9 3.1 6
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
secalert@redhat.com 8.5 1.8 6
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
0b0ca135-0b70-47e7-9f44-1890c2a1c46c 8.5 1.8 6
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CWE-201 Insertion of Sensitive Information Into Sent Data

The code transmits data to another actor, but a portion of the data includes sensitive information that should not be accessible to that actor.

https://access.redhat.com/errata/RHSA-2026:7397
Vendor Advisory
https://access.redhat.com/security/cve/CVE-2026-5483
Vendor Advisory
https://bugzilla.redhat.com/show_bug.cgi?id=2454764
Vendor Advisory
Issue Tracking
https://access.redhat.com/errata/RHSA-2026:7403
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:7398
Vendor Advisory
https://access.redhat.com/errata/RHSA-2026:7404
Vendor Advisory
https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5483.json