CVEvulnerability
CVE-2026-13717
8.8 HIGH
Official page ↗
- Status
- Awaiting Analysis
- Published
- 2026-08-10
- Last modified
- 2026-10-26
- Assigner
- [email protected]
- CVSS 3.1 ([email protected])
- 8.8 HIGH — CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
- Weaknesses
- CWE-284
Description
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.
Related
Weakness · CWE (1)
- CWE-284 Improper Access Control weakness
References
- https://access.redhat.com/errata/RHSA-2026:53262 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:60520 access.redhat.com
- https://access.redhat.com/errata/RHSA-2026:84734 access.redhat.com
- https://access.redhat.com/security/cve/CVE-2026-13717 access.redhat.com
- https://bugzilla.redhat.com/show_bug.cgi?id=2494203 bugzilla.redhat.com