Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation

{
                    "versions": [
                        {
                            "status": "affected",
                            "changes": [
                                {
                                    "at": "d7099eabc2c52bb5328cb7a9dd137cc2ea90dd53",
                                    "status": "unaffected"
                                }
                            ],
                            "version": "0",
                            "lessThan": "*",
                            "versionType": "git"
                        }
                    ],
                    "packageName": "maas-api",
                    "collectionURL": "https://github.com/opendatahub-io/models-as-a-service",
                    "defaultStatus": "unknown"
                }

{
                    "versions": [
                        {
                            "status": "affected",
                            "version": "0",
                            "lessThan": "*",
                            "versionType": "semver"
                        }
                    ],
                    "packageName": "maas-controller",
                    "collectionURL": "https://github.com/opendatahub-io/models-as-a-service",
                    "defaultStatus": "unaffected"
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.4",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhoai/odh-maas-api-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1787153683",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.4::el9"
                    ]
                }

{
                    "vendor": "Red Hat",
                    "product": "Red Hat OpenShift AI 3.4",
                    "collectionURL": "https://catalog.redhat.com/software/containers/",
                    "packageName": "rhoai/odh-maas-controller-rhel9",
                    "defaultStatus": "affected",
                    "versions": [
                        {
                            "version": "1791790095",
                            "lessThan": "*",
                            "versionType": "rpm",
                            "status": "unaffected"
                        }
                    ],
                    "cpes": [
                        "cpe:/a:redhat:openshift_ai:3.4::el9"
                    ]
                }