High severity · published Aug 8, 2024
CVE-2024-7557
Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai
8.8
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens, visible in the UI, can be utilized with oc --token={token} to exploit the elevated view privileges associated with the ServiceAccount, leading to unauthorized access to additional resources.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 61% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat OpenShift AI (RHOAI) · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift Data Science (RHODS) · Red Hat
All versions, or not specified · source: vendor
OA
Openshift AI · Redhat
All versions, or not specified · source: NVD
OD
Openshift Data Science · Redhat
All versions, or not specified · source: NVD
Affected product
RH
Red Hat OpenShift AI (RHOAI)
Red Hat
More from Red Hat OpenShift AI (RHOAI)
6.5
CVE-2026-48710
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
10.0
CVE-2026-46595
Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
10.0
CVE-2026-42043
Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0
10.0
CVE-2025-15379
Command Injection in mlflow/mlflow
10.0
CVE-2025-15036
Path Traversal Vulnerability in mlflow/mlflow