Skip to content
Threat Feed
Subscribe

Product

Red Hat OpenShift AI

2 briefs RSS
high advisory

CVE-2026-16745: Authentication Bypass in Red Hat OpenShift AI odh-dashboard

A critical vulnerability, CVE-2026-16745, exists in the odh-dashboard web console component of Red Hat OpenShift AI (RHOAI), allowing a malicious actor within the cluster to bypass authentication by providing an arbitrary access token, leading to user impersonation and unauthorized access to the Kubernetes API, potentially resulting in arbitrary code execution, privilege escalation, and information disclosure.

odh-dashboard +1 cloud-security kubernetes authentication-bypass privilege-escalation arbitrary-code-execution red-hat
4t 1c
low advisory

Feast Feature Server Denial of Service via Unauthenticated WebSocket Connections (CVE-2026-23538)

A vulnerability (CVE-2026-23538) exists in the Feast Feature Server's /ws/chat endpoint, allowing remote attackers to establish numerous unauthenticated, persistent WebSocket connections. This exploit, a form of resource exhaustion (CWE-770), consumes server resources like memory, CPU, and file descriptors, leading to a complete denial of service for legitimate users. Affected versions are those prior to 0.59.0.

Feast Feature Server +1 denial-of-service vulnerability websocket resource-exhaustion feast-feature-server
1r 1t 1c