CVE-2026-18949High· 8.8▾ TwilightA flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their …
▾ Twilight zone — High severity, or a signal on a lesser flaw
impact 48.4 · likelihood 0.1 · exploitation 0
Need a working PoC? Pro members can cast a request and our team develops one — it lands right here.
Stakeholder-Specific Vulnerability Categorization from CISA's ADP record at CVE.org: whether exploitation is observed, whether an attack can be automated, and how much of the system is at stake. The CVSS score shown above comes from the assigning CNA record, not NVD.
Disclosure to exploitation, from the record and what we observed since indexing it.
Disclosed via CVEORG
Last analysed / modified upstream
0.6%
A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-administrator level, gain access to sensitive data like credentials and keys across the entire cluster, and disrupt multi-tenant isolation.
rhoai/odh-dashboard-rhel9 (all versions)rhoai/odh-dashboard-rhel9 (all versions)rhoai/odh-dashboard-rhel9 (all versions)rhoai/odh-mod-arch-automl-rhel9 (all versions)rhoai/odh-mod-arch-autorag-rhel9 (all versions)rhoai/odh-mod-arch-eval-hub-rhel9 (all versions)rhoai/odh-mod-arch-gen-ai-rhel9 (all versions)rhoai/odh-mod-arch-maas-rhel9 (all versions)rhoai/odh-mod-arch-mlflow-rhel9 (all versions)rhoai/odh-mod-arch-model-registry-rhel9 (all versions)Refer to the linked advisories for vendor-supplied fixes and affected version ranges.
To mitigate this issue, restrict access to the opendatahub namespace to limit potential compromise of the dashboard pod. Implement egress NetworkPolicy rules to control and restrict outbound network traffic from the dashboard. Additionally, configure audit log alerting to monitor for and detect any unexpected creation of ClusterRoleBindings within the cluster.
Connected by shared product, vendor, weakness, or advisory.
CVE-2026-18950High· 8.8A flaw was found in odh-dashboard
CVE-2026-18982High· 8.8A flaw was found in the RHOAI training-operator
CVE-2026-16745High· 8.8A flaw was found in odh-dashboard, the web console component of Red Hat OpenShift AI (RHOAI)
CVE-2026-18608High· 8.7A flaw was found in the Data Science Pipelines Operator (DSPO)
CVE-2026-104795High· 8.8The insights-runtime-extractor runs as a privileged DaemonSet (`hostPID: true`) that scans container processes for runtime fingerprinting
CVE-2026-107176Medium· 6.8A flaw was found in the cluster-samples-operator