by Kastro
Paper/Archive/CVE-2026-15143

CVE-2026-15143

Red Hat Red Hat OpenShift AI 2.25 — Guardrails-detectors: guardrails-detectors: ssrf and local file read via user-supplied xml schema (xml-with-schema:)

EPSS 0.5%CVSS 9.3
critical.is priorityof 100
37
CVSS 9.3 (CNA)9.3 / 10 × 3027.9Not in CISA KEV+300.0EPSS percentile 45.1.451 × 209.0No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

A flaw was found in the file_type content detector of guardrails-detectors. This vulnerability allows a remote attacker to supply an arbitrary XML Schema Definition (XSD) string, which is processed without proper restrictions. This can lead to server-side requests to arbitrary URLs or local file reads, potentially resulting in sensitive information disclosure, such as cloud provider credentials or access to internal network services.

Affected

ProductAffectedFixed inSource
guardrails-detectors< 985c6d5a4a84360ff8b447b94e4a3cdfbda3da90985c6d5a4a84360ff8b447b94e4a3cdfbda3da90CNA
Red Hat OpenShift AI 2.25see advisory1791364320CNA
Red Hat OpenShift AI 2.25see advisory1791367475CNA
Red Hat OpenShift AI 3.4see advisory1791537794CNA
Red Hat OpenShift AI 3.4see advisory1791535841CNA

Scores by source

redhat (CNA)9.3CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:C/C:H/I:L/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: partial

References

advisoryaccess.redhat.com/errata/RHSA-2026:84734advisoryaccess.redhat.com/errata/RHSA-2026:87410refaccess.redhat.com/security/cve/CVE-2026-15143refbugzilla.redhat.com/show_bug.cgi?id=2498165