{"id":"CVE-2026-18949","title":"Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets and rbac management resources","summary":"A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their …","severity":"high","cvss":8.8,"cvssVector":"CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H","cvssSource":"cna","cwe":["CWE-250"],"vendor":"Red Hat","product":"rhoai/odh-dashboard-rhel9","affected":["rhoai/odh-dashboard-rhel9 (all versions)","rhoai/odh-dashboard-rhel9 (all versions)","rhoai/odh-dashboard-rhel9 (all versions)","rhoai/odh-mod-arch-automl-rhel9 (all versions)","rhoai/odh-mod-arch-autorag-rhel9 (all versions)","rhoai/odh-mod-arch-eval-hub-rhel9 (all versions)","rhoai/odh-mod-arch-gen-ai-rhel9 (all versions)","rhoai/odh-mod-arch-maas-rhel9 (all versions)","rhoai/odh-mod-arch-mlflow-rhel9 (all versions)","rhoai/odh-mod-arch-model-registry-rhel9 (all versions)"],"ssvc":{"exploitation":"none","automatable":"no","technicalImpact":"total","timestamp":"2026-08-11T17:13:53.564768Z"},"published":"2026-08-10","updated":"2026-10-19","sourceUpdated":"2026-10-19T11:10:20.355Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-18949","references":[{"url":"https://access.redhat.com/errata/RHSA-2026:53261","label":"RHSA-2026:53261"},{"url":"https://access.redhat.com/errata/RHSA-2026:53262","label":"RHSA-2026:53262"},{"url":"https://access.redhat.com/errata/RHSA-2026:53263","label":"RHSA-2026:53263"},{"url":"https://access.redhat.com/errata/RHSA-2026:84734","label":"RHSA-2026:84734"},{"url":"https://access.redhat.com/security/cve/CVE-2026-18949"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2511168","label":"RHBZ#2511168"}],"tags":["cve.org"],"epss":0.00601,"epssPercentile":0.47673,"ingestedAt":"2026-10-19T12:27:23.803Z","slug":"CVE-2026-18949","body":"## Overview\n\nA flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-administrator level, gain access to sensitive data like credentials and keys across the entire cluster, and disrupt multi-tenant isolation.\n\n## Affected\n\n- `rhoai/odh-dashboard-rhel9 (all versions)`\n- `rhoai/odh-dashboard-rhel9 (all versions)`\n- `rhoai/odh-dashboard-rhel9 (all versions)`\n- `rhoai/odh-mod-arch-automl-rhel9 (all versions)`\n- `rhoai/odh-mod-arch-autorag-rhel9 (all versions)`\n- `rhoai/odh-mod-arch-eval-hub-rhel9 (all versions)`\n- `rhoai/odh-mod-arch-gen-ai-rhel9 (all versions)`\n- `rhoai/odh-mod-arch-maas-rhel9 (all versions)`\n- `rhoai/odh-mod-arch-mlflow-rhel9 (all versions)`\n- `rhoai/odh-mod-arch-model-registry-rhel9 (all versions)`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nTo mitigate this issue, restrict access to the `opendatahub` namespace to limit potential compromise of the dashboard pod. Implement egress `NetworkPolicy` rules to control and restrict outbound network traffic from the dashboard. Additionally, configure audit log alerting to monitor for and detect any unexpected creation of `ClusterRoleBindings` within the cluster.","depth":"twilight","depthScore":49,"depthScoreParts":{"impact":48.4,"likelihood":0.1,"exploitation":0,"ransomware":0},"changes":[]}