VDB

CVE-2026-13717

CVE-2026-13717 PUBLISHED CVSS 8.8 HIGH

Reported by redhat · Published August 10, 2026

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.

Risk Scores

CVSS 3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
0
Red HatRed Hat OpenShift AI 3.41786123541
Red HatRed Hat OpenShift AI 3.41787153684
Red HatRed Hat OpenShift AI 3.41791468368
Red HatRed Hat OpenShift AI 3.41790958159
Red HatRed Hat OpenShift AI 3.41793001859
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI 3.41791468368
Red HatRed Hat OpenShift AI 3.41787153684
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI 3.41786123541
Red HatRed Hat OpenShift AI 3.41790958159
Red HatRed Hat OpenShift AI 3.41793001859
0

Timeline

  • Aug 10, 2026 CVE Published
  • Aug 11, 2026 Coalition ESS Score
  • Aug 14, 2026 CVE Updated
  • Aug 24, 2026 EPSS Score
  • Aug 26, 2026 EPSS Score
  • Aug 28, 2026 EPSS Score
  • Aug 30, 2026 EPSS Score
  • Sep 3, 2026 EPSS Score
  • Sep 6, 2026 EPSS Score
  • Sep 9, 2026 EPSS Score
  • Sep 12, 2026 EPSS Score
  • Sep 16, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›