High severity · published Aug 12, 2024
CVE-2024-7557
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace
8.8
CVSS
0.9%
EPSS
No
On KEV
Description
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens, visible in the UI, can be utilized with oc --token={token} to exploit the elevated view privileges associated with the ServiceAccount, leading to unauthorized access to additional resources.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.9% · higher than 60% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
OA
Openshift AI · Redhat
All versions, or not specified · source: NVD
OD
Openshift Data Science · Redhat
All versions, or not specified · source: NVD
Affected product
OA
Openshift AI
Redhat
More from Openshift AI
8.8
CVE-2026-42271
LiteLLM: Authenticated command execution via MCP stdio test endpoints
6.5
CVE-2026-48710
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
9.9
CVE-2026-5483
Odh-dashboard: odh dashboard kubernetes service account exposure
8.1
CVE-2025-12805
Llama-stack-k8s-operator: llama stack service exposed across namespaces due to missing networkpolicy
7.8
CVE-2026-1462
Safe Mode Bypass in keras-team/keras