CVE-2026-15581Published
Trustyai-service-operator: trustyai-service-operator: tas internal service bypasses kube-rbac-proxy, exposing unauthenticated quarkus api cluster-wide
cve-program · CVE-2026-15581
Publishedrhoai/odh-trustyai-service-operator-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI 2.25",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1785187119",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
]
}rhoai/odh-trustyai-service-operator-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI 2.25",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1787330073",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift_ai:2.25::el9"
]
}rhoai/odh-trustyai-service-operator-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI 3.3",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1785187521",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift_ai:3.3::el9"
]
}rhoai/odh-trustyai-service-operator-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI 3.4",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1784993206",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
]
}rhoai/odh-trustyai-service-operator-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI 3.4",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhoai/odh-trustyai-service-operator-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786614608",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift_ai:3.4::el9"
]
}rhoai/odh-latency-predictor-prediction-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI 3.5",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhoai/odh-latency-predictor-prediction-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786552271",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift_ai:3.5::el9"
]
}rhoai/odh-latency-predictor-training-rhel9
https://catalog.redhat.com/software/containers/
Original vendor version evidence · not evaluated as a NuGet range
{
"vendor": "Red Hat",
"product": "Red Hat OpenShift AI 3.5",
"collectionURL": "https://catalog.redhat.com/software/containers/",
"packageName": "rhoai/odh-latency-predictor-training-rhel9",
"defaultStatus": "affected",
"versions": [
{
"version": "1786552250",
"lessThan": "*",
"versionType": "rpm",
"status": "unaffected"
}
],
"cpes": [
"cpe:/a:redhat:openshift_ai:3.5::el9"
]
}Original source record · Cite this exact observation · Complete original publisher JSON