CVE-2026-13717High· 8.8▾ TwilightA flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. Thi…
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.5%
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.
llm-d < *rhoai/odh-rhel9-operator (all versions)rhoai/odh-maas-controller-rhel9 (all versions)rhoai/odh-kserve-controller-rhel9 (all versions)rhoai/odh-model-controller-rhel9 (all versions)rhoai/odh-kserve-llmisvc-controller-rhel9 (all versions)rhoai/odh-mod-arch-maas-rhel9 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
You can restrict Gateway access to some namespaces only. However, it does not prevent someone from an authorized namespace to hijack the traffic of another. Fully locking down access to the MaaS Gateway is a solution, however it defeats the self-service approach of the component.
Connected by shared product, vendor, weakness, or advisory.
CVE-2020-26160High· 7.5jwt-go: access restriction bypass vulnerability (CVE-2020-26160)
CVE-2024-22257High· 8.2In Spring Security, versions 5.7.x prior to 5.7.12, 5.8.x prior to 5.8.11, versions 6.0.x prior to 6.0.9, versions 6.1.x prior to 6.1.8, versions 6.2.x prior to 6.2.3, an application is possible vulnerable to broken access control whe…
CVE-2026-103314High· 7.4Stackrox: stackrox: saml response replay allows multiple central authentication tokens
CVE-2026-112214Medium· 6.5Gstreamer1-plugins-ugly-free: gstreamer1-plugins-ugly-free: unbounded memory allocation in asfdemux simple index parser
CVE-2026-112210Medium· 6.0Rhc: rhc: local privilege escalation via symlink following in rhc-canonical-facts.service
CVE-2026-16460High· 7.4bootc: ostree: bootc/ostree: staged deployments not revalidated against container signature policy before finalization (CVE-2026-16460)