What is CVE-2026-18608?

CVE-2026-18608 is a high-severity vulnerability in Red Hat Openshift Ai 3.3, classified under CWE-250. CVSS score: 8.7/10. Published 2026-08-10.

How severe is CVE-2026-18608?

High severity. CVSS v3 base score is 8.7 out of 10.

Vulnerability in Red Hat Openshift Ai 3.3

CVE-2026-18608

A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the a…

CVSS v3 metric

CVSS v3 base score 8.7 (High). Vector: CVSS:3.1/AV:N/AC:L/PR:H/UI:N/S:C/C:H/I:H/A:N.

Affected products

Red Hat Openshift Ai 3.3 — versions 1785187936
Red Hat Openshift Ai (Rhoai)

Weakness classification (CWE)

CWE-250

References

secalert@redhat.com (x_refsource_REDHAT, vdb-entry)
secalert@redhat.com (x_refsource_REDHAT, issue-tracking)
secalert@redhat.com (x_refsource_REDHAT, vendor-advisory)

Frequently asked questions

What is CVE-2026-18608?: CVE-2026-18608 is a high-severity vulnerability in Red Hat Openshift Ai 3.3, classified under CWE-250. CVSS score: 8.7/10. Published 2026-08-10.
How severe is CVE-2026-18608?: High severity. CVSS v3 base score is 8.7 out of 10.