VDB
RHSA-2026:87410
RHSA-2026:87410
PUBLISHED
CVSS 7.5 HIGH
A flaw was found in idna crate. This vulnerability allows hostname spoofing and potential privilege escalation via specially crafted Punycode labels that render as ASCII or empty labels, leading to incorrect equality comparisons during hostname validation.
Risk Scores
CVSS 3.1
7.5
CVSS:3.1/AV:N/AC:H/PR:N/UI:R/S:U/C:H/I:H/A:H
Affected Products
| Vendor | Product | Versions |
|---|---|---|
| Red Hat | registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:9b564494b8987084b4c3994dc1ca4c5b8b50c82d917a7e7e51e27853836d9af0_s390x as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cuda-py312-rhel9@sha256:ad1ce3a91814d81da37728486b3fe34badc41adf4bdb1de3d69d38fb30ef2041_amd64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-pipeline-runtime-minimal-cpu-py312-rhel9@sha256:af9a4c632a9140bc301cfc53fb902e7e8edbcf2dcadd72af5013aee7e3e5e6d3_arm64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-rhel9-operator@sha256:be310879815150bdf21e08bce2f2662084b875e70a95b2abaf560bce03f8c48c_amd64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-modelmesh-rhel9@sha256:a69917dd0aaa4a0814c88c8f4024603615eb137e843e8634f35cae7365537c5d_amd64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:3c5a575ef33b0518a63dba664214c6ef05fcadf6d5c7f56fddab271766bacd12_amd64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:78ef44a2ed8bb9ace068af64e10eeaddfb8d4e9826bea5554ef46ac2a5c9ad73_arm64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-vllm-cpu-rhel9@sha256:39c6f85fe6a70d98d88a62654c72a25a4a718d1707bf90c9f8f452dd412a9211_s390x as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:6cf062dc2dddc49d364106d225ceda23adf4c7c29eb55698a02221b57a3e4650_arm64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-workbench-jupyter-minimal-cpu-py312-rhel9@sha256:d600411e817c0a812a6dbb5b2d15a5b3115e093feedf0884c12de36bc19936a5_s390x as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-notebook-controller-rhel9@sha256:724df7aff293615a4473af75066f033f4e8c3d988671c68419d02814e977680c_s390x as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-model-controller-rhel9@sha256:fabf37c7323bbe9da1981b57b3aac49310dfc3b4f0b7e126acd11dc4b7bbd482_ppc64le as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:adb80a437ba4523f382945003ae8de0e234101f19cdf94cc58e3e4ea613d3084_ppc64le as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-trustyai-vllm-orchestrator-gateway-rhel9@sha256:5de4eef921e3049d4ab668ab090dca77b57bd8cea7c142c7545c3ec96fa4ef3a_amd64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:d86f0fcf66e6c8a4fa587d1ed5df67917ecfd94237a84e00800c27bd8bb5ea36_amd64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-kserve-agent-rhel9@sha256:224998a4fd210ae1cbaa34a8764590adb2c1000073d90be80c8c1e18c32228de_amd64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:b964a1aa7c72b6c2899e0ec121d0e32fe6b04421d105001ffce15255b8e2cffc_ppc64le as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9@sha256:e8be27edcdd4465d4f64878b8a618c4c009c4c87c476bb1a57dac379fd265d89_arm64 as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-must-gather-rhel9@sha256:5a89ee3712077b9b03391cc737e769d63847b4109275b11c4ab4dd9bb677e6f6_ppc64le as a component of Red Hat OpenShift AI 2.25 | * |
| Red Hat | registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:1ac6fea535e8b0795b3d7e8a426e341d67872755dd23230cfdcac5a84a150644_arm64 as a component of Red Hat OpenShift AI 2.25 | * |
…and 185 more
Timeline
- Oct 21, 2026 CVE Published
- Oct 29, 2026 CVE Updated
- Oct 29, 2026 Distribution Patch
- Oct 29, 2026 Distribution Patch
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
- Oct 29, 2026 Security Advisory
References
- https://access.redhat.com/errata/RHSA-2026:87410 advisory
- https://access.redhat.com/security/cve/CVE-2024-12224 advisory
- https://access.redhat.com/security/cve/CVE-2025-14920 advisory
- https://access.redhat.com/security/cve/CVE-2025-14921 advisory
- https://access.redhat.com/security/cve/CVE-2025-14924 advisory
- https://access.redhat.com/security/cve/CVE-2025-14925 advisory
- https://access.redhat.com/security/cve/CVE-2025-14926 advisory
- https://access.redhat.com/security/cve/CVE-2025-14927 advisory
- https://access.redhat.com/security/cve/CVE-2025-14928 advisory
- https://access.redhat.com/security/cve/CVE-2025-14929 advisory
- https://access.redhat.com/security/cve/CVE-2025-14930 advisory
- https://access.redhat.com/security/cve/CVE-2025-61726 advisory
- https://access.redhat.com/security/cve/CVE-2025-61729 advisory
- https://access.redhat.com/security/cve/CVE-2026-102831 advisory
- https://access.redhat.com/security/cve/CVE-2026-102925 advisory
- https://access.redhat.com/security/cve/CVE-2026-102930 advisory
- https://access.redhat.com/security/cve/CVE-2026-102937 advisory
- https://access.redhat.com/security/cve/CVE-2026-102938 advisory
- https://access.redhat.com/security/cve/CVE-2026-103262 advisory
- https://access.redhat.com/security/cve/CVE-2026-104851 advisory
…and 1123 more