High severity · published Aug 10, 2026
CVE-2026-13717
Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)
8.8
CVSS
0.5%
EPSS
No
On KEV
Description
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Attack vector
Network
Complexity
Low
Privileges
Low
User interaction
None
Confidentiality
High
Integrity
High
Availability
High
Scope
Unchanged
Exploitation
Is it being used?
Exploit prediction (EPSS)0.5% · higher than 45% of CVEs
Exploited in the wildNo evidence yet
CISA KEVNot listed
Ransomware campaign useNot known
Affected products
Which versions
RH
Red Hat OpenShift AI (RHOAI) · Red Hat
All versions, or not specified · source: vendor
RH
Red Hat OpenShift AI 3.4 · Red Hat
All versions, or not specified · source: vendor
References
NVD
https://nvd.nist.gov/vuln/detail/CVE-2026-13717
CVE.org
https://www.cve.org/CVERecord?id=CVE-2026-13717
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:53262
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:60520
access.redhat.com
https://access.redhat.com/errata/RHSA-2026:84734
access.redhat.com
https://access.redhat.com/security/cve/CVE-2026-13717
bugzilla.redhat.com
https://bugzilla.redhat.com/show_bug.cgi?id=2494203
More from Red Hat OpenShift AI (RHOAI)
6.5
CVE-2026-48710
Starlette has missing Host header validation that poisons request.url.path, bypassing path-based security checks
10.0
CVE-2026-46595
Invoking VerifiedPublicKeyCallback permissions skip enforcement in golang.org/x/crypto/ssh
10.0
CVE-2026-42043
Axios: Incomplete Fix for CVE-2025-62718 — NO_PROXY Protection Bypassed via RFC 1122 Loopback Subnet (127.0.0.0/8) in Axios 1.15.0
10.0
CVE-2025-15379
Command Injection in mlflow/mlflow
10.0
CVE-2025-15036
Path Traversal Vulnerability in mlflow/mlflow