---
id: CVE-2026-18949
title: >-
  Odh-dashboard: odh-dashboard: clusterrole grants cluster-wide crud on secrets
  and rbac management resources
summary: >-
  A flaw was found in odh-dashboard. This vulnerability allows an attacker, who
  has compromised the dashboard's Service Account (SA) token, to exploit overly
  broad permissions granted to the SA. This enables the attacker to escalate
  their …
severity: high
cvss: 8.8
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'
cvssSource: cna
cwe:
  - CWE-250
vendor: Red Hat
product: rhoai/odh-dashboard-rhel9
affected:
  - rhoai/odh-dashboard-rhel9 (all versions)
  - rhoai/odh-dashboard-rhel9 (all versions)
  - rhoai/odh-dashboard-rhel9 (all versions)
  - rhoai/odh-mod-arch-automl-rhel9 (all versions)
  - rhoai/odh-mod-arch-autorag-rhel9 (all versions)
  - rhoai/odh-mod-arch-eval-hub-rhel9 (all versions)
  - rhoai/odh-mod-arch-gen-ai-rhel9 (all versions)
  - rhoai/odh-mod-arch-maas-rhel9 (all versions)
  - rhoai/odh-mod-arch-mlflow-rhel9 (all versions)
  - rhoai/odh-mod-arch-model-registry-rhel9 (all versions)
ssvc:
  exploitation: none
  automatable: 'no'
  technicalImpact: total
  timestamp: '2026-08-11T17:13:53.564768Z'
published: '2026-08-10'
updated: '2026-10-19'
sourceUpdated: '2026-10-19T11:10:20.355Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-18949'
references:
  - url: 'https://access.redhat.com/errata/RHSA-2026:53261'
    label: 'RHSA-2026:53261'
  - url: 'https://access.redhat.com/errata/RHSA-2026:53262'
    label: 'RHSA-2026:53262'
  - url: 'https://access.redhat.com/errata/RHSA-2026:53263'
    label: 'RHSA-2026:53263'
  - url: 'https://access.redhat.com/errata/RHSA-2026:84734'
    label: 'RHSA-2026:84734'
  - url: 'https://access.redhat.com/security/cve/CVE-2026-18949'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2511168'
    label: RHBZ#2511168
tags:
  - cve.org
epss: 0.00601
epssPercentile: 0.47739
ingestedAt: '2026-10-19T12:27:23.803Z'
---

## Overview

A flaw was found in odh-dashboard. This vulnerability allows an attacker, who has compromised the dashboard's Service Account (SA) token, to exploit overly broad permissions granted to the SA. This enables the attacker to escalate their privileges to cluster-administrator level, gain access to sensitive data like credentials and keys across the entire cluster, and disrupt multi-tenant isolation.

## Affected

- `rhoai/odh-dashboard-rhel9 (all versions)`
- `rhoai/odh-dashboard-rhel9 (all versions)`
- `rhoai/odh-dashboard-rhel9 (all versions)`
- `rhoai/odh-mod-arch-automl-rhel9 (all versions)`
- `rhoai/odh-mod-arch-autorag-rhel9 (all versions)`
- `rhoai/odh-mod-arch-eval-hub-rhel9 (all versions)`
- `rhoai/odh-mod-arch-gen-ai-rhel9 (all versions)`
- `rhoai/odh-mod-arch-maas-rhel9 (all versions)`
- `rhoai/odh-mod-arch-mlflow-rhel9 (all versions)`
- `rhoai/odh-mod-arch-model-registry-rhel9 (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

To mitigate this issue, restrict access to the `opendatahub` namespace to limit potential compromise of the dashboard pod. Implement egress `NetworkPolicy` rules to control and restrict outbound network traffic from the dashboard. Additionally, configure audit log alerting to monitor for and detect any unexpected creation of `ClusterRoleBindings` within the cluster.