CVE-2026-5483
published 2026-04-10CVE-2026-5483: A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the…
PriorityP264critical9.9CVSS 3.1
AVNACLPRLUINSCCHIHAH
EPSS
0.65%
50.7th percentile
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Affected
16 ranges
| Vendor | Product | Version range | Fixed in |
|---|---|---|---|
| redhat | openshift_ai | — | — |
| redhat | openshift_ai | — | — |
| redhat | openshift_ai | >= 2.16 < 2.16.4 | 2.16.4 |
| redhat | openshift_ai | >= 2.25 < 2.25.4 | 2.25.4 |
| rhoai | odh-core-bff-rhel9 | — | — |
| rhoai | odh-dashboard-operator-rhel9 | — | — |
| rhoai | odh-dashboard-rhel8 | — | — |
| rhoai | odh-dashboard-rhel9 | — | — |
| rhoai | odh-mod-arch-agent-ops-rhel9 | — | — |
| rhoai | odh-mod-arch-automl-rhel9 | — | — |
| rhoai | odh-mod-arch-autorag-rhel9 | — | — |
| rhoai | odh-mod-arch-eval-hub-rhel9 | — | — |
| rhoai | odh-mod-arch-gen-ai-rhel9 | — | — |
| rhoai | odh-mod-arch-maas-rhel9 | — | — |
| rhoai | odh-mod-arch-mlflow-rhel9 | — | — |
| rhoai | odh-mod-arch-model-registry-rhel9 | — | — |
Detection & IOCsextracted from sources · hover to see the quote
- →The vulnerable NodeJS endpoint that leaks Kubernetes Service Account tokens is `/api/nim-serving/:nimResource` — monitor or restrict access to this path in odh-dashboard. ↗
- →Exploitation requires authenticated access to the odh-dashboard — audit dashboard authentication logs for unexpected or anomalous access to the NIM serving endpoint. ↗
- →The endpoint only leaks a token if the NIM Account CR and the referenced secret both exist on the cluster; a 404 response indicates no token was leaked — correlate non-404 responses to `/api/nim-serving/` as high-fidelity signals. ↗
- ·Exploitation requires the NIM Account CR to exist on the cluster (version 2.25+); clusters without NIM integration configured are not exploitable via this path. ↗
- ·If patching is not immediately possible, disabling or removing the NIM (NVIDIA Inference Microservice) integration from RHOAI mitigates the vulnerability. ↗
- ·The packages rhoai/odh-mod-arch-gen-ai-rhel9, rhoai/odh-mod-arch-maas-rhel9, and rhoai/odh-mod-arch-model-registry-rhel9 are confirmed Not Affected. ↗
CVSS provenance
nvdv3.19.9CRITICALCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:H/A:H
vendor_redhat8.5HIGH
Stop checking back — get the weekly exploitation signal.
Every Monday: what got weaponized or added to CISA KEV in the last seven days — each CVE cross-linked to its PoC, Nuclei template, and detection rule. Free, one email a week, unsubscribe in one click.
GHSA
A flaw was found in odh-dashboard in Red Hat OpenShift AI.
ghsa_unreviewed·2026-09-07·CVSS 6.5
CVE-2026-86332 [MEDIUM] CWE-862 A flaw was found in odh-dashboard in Red Hat OpenShift AI.
A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).
GHSA
GHSA-w59f-v72r-w493: A flaw was found in odh-dashboard in Red Hat Openshift AI
ghsa_unreviewed·2026-04-10
CVE-2026-5483 [HIGH] CWE-201 GHSA-w59f-v72r-w493: A flaw was found in odh-dashboard in Red Hat Openshift AI
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Red Hat
odh-dashboard: odh-dashboard: NIM credential Secret readable by any authenticated user
vendor_redhat·2026-09-07·CVSS 6.5
CVE-2026-86332 [MEDIUM] CWE-862 odh-dashboard: odh-dashboard: NIM credential Secret readable by any authenticated user
odh-dashboard: odh-dashboard: NIM credential Secret readable by any authenticated user
A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same rout
Red Hat
odh-dashboard: ODH Dashboard Kubernetes Service Account Exposure
vendor_redhat·2026-04-10·CVSS 8.5
CVE-2026-5483 [HIGH] CWE-201 odh-dashboard: ODH Dashboard Kubernetes Service Account Exposure
odh-dashboard: ODH Dashboard Kubernetes Service Account Exposure
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Statement: A flaw in the `odh-dashboard` component of Red Hat OpenShift AI allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This vulnerability could enable an attacker to gain unauthorized access to Kubernetes resources within the OpenShift AI environment.
The NIM serving API endpoint (`/api/nim-serving/:nimResource`) returns the full K8 client response including the dashbo
No detection rules found.
No public exploits indexed.
Bugzilla
CVE-2026-86332 odh-dashboard: odh-dashboard: NIM credential Secret readable by any authenticated user
bugzilla·2026-09-07·CVSS 6.5
CVE-2026-86332 [MEDIUM] CVE-2026-86332 odh-dashboard: odh-dashboard: NIM credential Secret readable by any authenticated user
CVE-2026-86332 odh-dashboard: odh-dashboard: NIM credential Secret readable by any authenticated user
A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper o
Bugzilla
CVE-2026-5483 odh-dashboard: ODH Dashboard Kubernetes Service Account Exposure
bugzilla·2026-04-03·CVSS 8.5
CVE-2026-5483 [HIGH] CVE-2026-5483 odh-dashboard: ODH Dashboard Kubernetes Service Account Exposure
CVE-2026-5483 odh-dashboard: ODH Dashboard Kubernetes Service Account Exposure
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
https://access.redhat.com/errata/RHSA-2026:7397https://access.redhat.com/errata/RHSA-2026:7398https://access.redhat.com/errata/RHSA-2026:7403https://access.redhat.com/errata/RHSA-2026:7404https://access.redhat.com/security/cve/CVE-2026-5483https://bugzilla.redhat.com/show_bug.cgi?id=2454764https://access.redhat.com/errata/RHSA-2026:7397https://access.redhat.com/errata/RHSA-2026:7398https://access.redhat.com/errata/RHSA-2026:7403https://access.redhat.com/errata/RHSA-2026:7404https://access.redhat.com/security/cve/CVE-2026-5483https://bugzilla.redhat.com/show_bug.cgi?id=2454764https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-5483.json
2026-04-10
Published