VDB

CVE-2026-18951

CVE-2026-18951 PUBLISHED CVSS 8.8 HIGH

Reported by redhat · Published August 10, 2026

A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespace to create, modify, and delete `TrainJobs`. When combined with a separate vulnerability (TRN-01) that permits arbitrary pod configurations, a remote attacker with namespace editor privileges could exploit this to escalate privileges, potentially leading to arbitrary code execution.

Risk Scores

CVSS 3.1
8.8
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Affected Products

VendorProductVersions
Red HatRed Hat OpenShift AI 3.31785188461
Red HatRed Hat OpenShift AI 3.31790137153
Red HatRed Hat OpenShift AI 3.41784814352
Red HatRed Hat OpenShift AI 3.41787361677
Red HatRed Hat OpenShift AI 3.51786552271
Red HatRed Hat OpenShift AI 3.51786552250
Red HatRed Hat OpenShift AI (RHOAI)
Red HatRed Hat OpenShift AI 3.41784814352, 1784814352, 1787361677
Red HatRed Hat OpenShift AI 3.31785188461, 1790137153, 1785188461
Red HatRed Hat OpenShift AI 3.51786552271, 1786552271, 1786552271
Red HatRed Hat OpenShift AI 3.51786552250, 1786552250, 1786552250

Timeline

  • Aug 10, 2026 CVE Published
  • Aug 11, 2026 Coalition ESS Score
  • Aug 24, 2026 EPSS Score
  • Aug 26, 2026 EPSS Score
  • Aug 28, 2026 EPSS Score
  • Aug 30, 2026 EPSS Score
  • Sep 3, 2026 EPSS Score
  • Sep 5, 2026 EPSS Score
  • Sep 6, 2026 EPSS Score
  • Sep 9, 2026 EPSS Score
  • Sep 12, 2026 EPSS Score
  • Sep 16, 2026 EPSS Score

References

Open in Interactive Console →
$ Console Community · 50/day Open console ›