{"id":"CVE-2026-18620","title":"A flaw was found in Data Science Pipelines","summary":"A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged ServiceAccount (SA) during a CreateRu…","severity":"high","cvss":7.1,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N","cwe":["CWE-639"],"vendor":"Red Hat","product":"rhoai/odh-ml-pipelines-api-server-v2-rhel9","affected":["rhoai/odh-ml-pipelines-api-server-v2-rhel9 (all versions)","rhoai/odh-ml-pipelines-api-server-v2-rhel9 (all versions)","rhoai/odh-ml-pipelines-api-server-v2-rhel9 (all versions)","rhoai/odh-ml-pipelines-api-server-v2-rhel9 (all versions)","rhoai/odh-ml-pipelines-api-server-v2-rhel9 (all versions)","rhoai/odh-latency-predictor-prediction-rhel9 (all versions)","rhoai/odh-latency-predictor-training-rhel9 (all versions)"],"patched":["openshift_ai 2.25","openshift_ai 3.3","openshift_ai 3.4"],"published":"2026-08-10","updated":"2026-09-21","sourceUpdated":"2026-09-21T12:17:12.520","source":"NVD","sourceUrl":"https://nvd.nist.gov/vuln/detail/CVE-2026-18620","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:53261","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:53262","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:53263","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:60367","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:60520","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/errata/RHSA-2026:65126","label":"secalert@redhat.com"},{"url":"https://access.redhat.com/security/cve/CVE-2026-18620","label":"secalert@redhat.com"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2510320","label":"secalert@redhat.com"},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-18620.json"},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-18620"},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-18620"}],"tags":["nvd","cve.org","csaf","vex","red-hat"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"partial","timestamp":"2026-08-11T13:32:11.009227Z"},"epss":0.00478,"epssPercentile":0.38576,"ingestedAt":"2026-09-08T23:13:54.647Z","slug":"CVE-2026-18620","body":"## Overview\n\nA flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged ServiceAccount (SA) during a CreateRun request, an attacker can bypass authorization checks. This allows the tenant to run their containers with elevated privileges, potentially leading to the disclosure of sensitive information (secrets) and the ability to execute commands within other users' pods.\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n## Vendor advisories\n\n- **RHSA-2026:65126** · Red Hat · fixed in: Red Hat OpenShift AI 2.25 · released 2026-09-08 · [advisory](https://access.redhat.com/errata/RHSA-2026:65126)\n- **RHSA-2026:53261** · Red Hat · fixed in: Red Hat OpenShift AI 2.25 · released 2026-08-11 · [advisory](https://access.redhat.com/errata/RHSA-2026:53261)\n- **RHSA-2026:53263** · Red Hat · fixed in: Red Hat OpenShift AI 3.3 · released 2026-08-11 · [advisory](https://access.redhat.com/errata/RHSA-2026:53263)\n- **RHSA-2026:60520** · Red Hat · fixed in: Red Hat OpenShift AI 3.4 · released 2026-08-27 · [advisory](https://access.redhat.com/errata/RHSA-2026:60520)\n- **RHSA-2026:53262** · Red Hat · fixed in: Red Hat OpenShift AI 3.4 · released 2026-08-11 · [advisory](https://access.redhat.com/errata/RHSA-2026:53262)\n- **RHSA-2026:60367** · Red Hat · fixed in: Red Hat OpenShift AI 3.5 · released 2026-08-26 · [advisory](https://access.redhat.com/errata/RHSA-2026:60367)","depth":"twilight","depthScore":39,"depthScoreParts":{"impact":39.1,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}