VDB
CVE-2026-14450
CVE-2026-14450
PUBLISHED
CVSS 9.9 CRITICAL
Reported by redhat · Published August 10, 2026
A flaw was found in the MaaS API. This vulnerability allows any pod within the cluster to bypass the Kuadrant AuthPolicy gateway by forging HTTP headers, specifically `X-MaaS-Username` and `X-MaaS-Group`, which are trusted verbatim. This lack of first-party authentication enables an attacker to gain unauthorized access and escalate privileges. The concrete consequences include the ability to mint Kubernetes ServiceAccount tokens in other tenants' namespaces, revoke API keys, and exfiltrate sensitive model access configuration.
Risk Scores
CVSS 3.1
9.9
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | Red Hat OpenShift AI 3.4 | 1785850409 |
| Red Hat | Red Hat OpenShift AI 3.4 | 1787153683 |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI (RHOAI) | |
| Red Hat | Red Hat OpenShift AI 3.4 | 1785850409, 1787153683 |
| Red Hat | Red Hat OpenShift AI (RHOAI) |
Timeline
- Aug 10, 2026 CVE Published
- Aug 11, 2026 Coalition ESS Score
- Aug 24, 2026 EPSS Score
- Aug 26, 2026 EPSS Score
- Aug 28, 2026 EPSS Score
- Aug 28, 2026 Distribution Patch
- Aug 28, 2026 Security Advisory
- Aug 28, 2026 Distribution Patch
- Aug 28, 2026 Security Advisory
- Aug 30, 2026 EPSS Score
- Sep 3, 2026 EPSS Score
- Sep 6, 2026 EPSS Score
References
- RHSA-2026:53262 vendor-advisoryx_refsource_REDHAT
- RHSA-2026:60520 vendor-advisoryx_refsource_REDHAT
- vdb-entryx_refsource_REDHAT
- RHBZ#2496373 issue-trackingx_refsource_REDHAT