EUVD-2026-55812
GHSA-vh9j-mvrr-922q
Severity by source
AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Scope change and full C/I impact confirmed by cluster-admin takeover potential; PR:H reflects mandatory prior DSPO pod compromise; A:N because availability impact is not independently described.
Primary rating from Vendor (redhat).
CVSS VectorVendor: redhat
CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N
Lifecycle Timeline
2DescriptionCVE.org
A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wide roles, could be exploited. If the DSPO pod were compromised, an attacker could leverage these privileges to gain full administrative control over the entire Kubernetes cluster.
Articles & Coverage 1
AnalysisAI
Overprivileged ClusterRole assignments in Red Hat OpenShift AI's Data Science Pipelines Operator (DSPO) create a cluster-wide privilege escalation path if the operator pod is compromised. The DSPO ClusterRole grants capabilities well beyond operational necessity - including pod exec and cluster-wide RBAC management - directly violating the principle of least privilege (CWE-250). …
Unlock full vulnerability intelligence
- Risk assessment & exploitation conditions
- Attack chain visualization
- Remediation with exact patch versions
- Threat intelligence from 22 sources
- Personal watchlist & email alerts
Free forever · No credit card required
Attack ChainAIDerived
Hypothetical attack flow derived from CVE metadata
Vulnerability AssessmentAI
| Exploitation | Exploitation requires that the DSPO (Data Science Pipelines Operator) component of Red Hat OpenShift AI is deployed and actively running in the target cluster - environments that have not installed RHOAI or have not enabled DSPO are not affected. … Additional conditions and limiting factors are described in the full assessment. |
| Risk Assessment | With a CVSS base score of 8.7 and a scope-changed vector (S:C, C:H, I:H), the inherent severity is high, but the PR:H prerequisite - requiring prior compromise of the DSPO pod itself - substantially narrows the realistic exploitation window compared to a direct unauthenticated attack. … Full risk analysis with EPSS, KEV, and SSVC signal comparison available after sign-in. |
| Exploit Scenario | An attacker who achieves remote code execution within the DSPO pod - through a vulnerability in the operator's dependencies, a misconfigured image pull source, or a supply-chain compromise - mounts the pod's service account token and issues Kubernetes API calls using the overprivileged ClusterRole. The attacker creates a new ClusterRoleBinding granting themselves cluster-admin, then uses that binding to access secrets across all namespaces, exec into etcd or control-plane adjacent pods, and establish persistent backdoor access to the entire cluster. … |
| Remediation | The primary remediation is to apply the vendor-issued patch once Red Hat publishes a fixed RHOAI release addressing the overprivileged ClusterRole - consult https://access.redhat.com/security/cve/CVE-2026-18608 for the exact patched version, as no specific fix version was confirmed in the available data. … Detailed patch versions, workarounds, and compensating controls in full report. |
Recommended ActionAI
Within 24 hours: Audit all DSPO ClusterRole assignments across production and non-production OpenShift AI clusters and document which service accounts have cluster-wide permissions; immediately implement network segmentation to restrict DSPO operator pod communications. …
Sign in for detailed remediation steps and compensating controls.
Threat intelligence, references, and detailed analysis are available after sign-in.
More in Kubernetes
View allA critical vulnerability in Kubernetes ingress-nginx controller allows unauthenticated attackers with pod network access
Credential-harvesting malware compromised 84 versions of 42 TanStack npm packages on 2026-05-11 via chained GitHub Actio
Kubernetes ingress-nginx contains a configuration injection vulnerability via the mirror-target and mirror-host Ingress
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-url` Ingres
A security issue was discovered in ingress-nginx https://github.com/kubernetes/ingress-nginx where the `auth-tls-match-c
Kubernetes API server in all versions allow an attacker who is able to create a ClusterIP service and set the spec.exter
A security issue was discovered in Kubernetes where a user that can create pods on Windows nodes may be able to escalate
Argo CD is a declarative, GitOps continuous delivery tool for Kubernetes. Rated critical severity (CVSS 9.9), this vulne
Unauthenticated remote attackers can trigger complete database overwrites, server-side file reads, and SSRF attacks agai
The Kubernetes integration in GitLab Enterprise Edition 11.x before 11.2.8, 11.3.x before 11.3.9, and 11.4.x before 11.4
Fluentd configuration injection in the kube-logging Logging operator before 6.6.0 allows a namespace-scoped user who can
Kyverno Kubernetes policy engine prior to 1.x has a privilege escalation vulnerability (CVSS 9.9) allowing policy bypass
Same weakness CWE-250 – Execution with Unnecessary Privileges
View allSame technique Privilege Escalation
View allVendor StatusVendor
Share
External POC / Exploit Code
Leaving vuln.today