by Kastro CVE-2026-5483
Red Hat Red Hat OpenShift AI 2.16 — Odh-dashboard: odh dashboard kubernetes service account exposure
Description · from the CVE record
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Affected
ProductAffectedFixed inSource
Red Hat OpenShift AI 2.16see advisory1775230902CNA
Red Hat OpenShift AI 2.25see advisory1775234711CNA
Red Hat OpenShift AI 3.2see advisory1775523049CNA
Red Hat OpenShift AI 3.3see advisory1775239958CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI (RHOAI)see advisory–CNA
Red Hat OpenShift AI 2.16see advisory1775230902redhat-SADP
Red Hat OpenShift AI 2.25see advisory1775234711redhat-SADP
Red Hat OpenShift AI 3.2see advisory1775523049redhat-SADP
Red Hat OpenShift AI 3.3see advisory1775239958redhat-SADP
Red Hat OpenShift AI (RHOAI)see advisory–redhat-SADP
Scores by source
NVD9.9CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
redhat (CNA)8.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
redhat-SADP (CNA)8.5CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA ADPSSVCExploitation: none · Automatable: no · Technical impact: total