CVE Tools
Track your stack

Openshift AI

38 CVEs tracked. 2 of them are in CISA KEV.

This hub aggregates every CVE we track for Openshift AI, a product in the operating systems space. Use it to gauge the current risk picture and drill into individual advisories.

Openshift AI CVEs per month

Dec 2024 to Nov 2026. Point at a month, or focus the strip and use the arrow keys.
Openshift AI CVEs per month
MonthCVEs
2024-120
2025-013
2025-020
2025-030
2025-040
2025-050
2025-062
2025-072
2025-080
2025-091
2025-101
2025-110
2025-123
2026-015
2026-023
2026-034
2026-045
2026-052
2026-063
2026-071
2026-080
2026-090
2026-100
2026-110

Severity

How the 38 CVEs score on CVSS. Severity is not exploitation: KEV is counted above.

  • Critical25%
  • High2361%
  • Medium1334%

Latest CVEs

The 15 most recently published vulnerabilities affecting Openshift AI.

  1. CVE-2026-15154Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex6.5
  2. CVE-2026-58016Glib: integer underflow in gio/gdbusintrospection.c via "g_dbus_node_info_new_for_xml"7.5
  3. CVE-2023-54365Traefik - Denial of Service via HTTP/2 Request Handling7.5
  4. CVE-2026-46625JavaScript Cookie: Per-instance prototype hijack in assign() enables cookie-attribute injection7.5
  5. CVE-2026-48710Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks6.5
  6. CVE-2026-42271LiteLLM: Authenticated command execution via MCP stdio test endpoints8.8
  7. CVE-2026-40192Pillow is vulnerable to a FITS GZIP decompression bomb7.5
  8. CVE-2026-39979jq: Out-of-Bounds Read in jv_parse_sized() Error Formatting for Non-NUL-Terminated Counted Buffers6.5
  9. CVE-2026-1462Safe Mode Bypass in keras-team/keras7.8
  10. CVE-2026-5483Odh-dashboard: odh dashboard kubernetes service account exposure8.5
  11. CVE-2026-32281Inefficient policy validation in crypto/x5097.5
  12. CVE-2025-12805Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy8.1
  13. CVE-2026-4775Libtiff: libtiff: arbitrary code execution or denial of service via signed integer overflow in tiff file processing7.8
  14. CVE-2026-33056tar-rs: unpack_in can chmod arbitrary directories by following symlinks6.5
  15. CVE-2026-31958Tornado has a DoS due to too many multipart parts7.5

Product grouping is registry-driven, with AI assist and human review. How it works