Track vulnerabilities like this one. Sign up free to get alerted when software you use is affected.
9.1

Red Hat OpenShift AI lets attacker use another tenant's LLM

CVE-2026-117574 · published 5 days ago
Summary

In Red Hat OpenShift AI, an attacker who already has an account can send a request that includes a different tenant's model ID. Because the system does not check whether the requester is allowed to use that model, it hands out the other tenant's API keys, letting the attacker run jobs and consume the other tenant's large‑language‑model resources. To protect yourself, apply the latest security updates from Red Hat and restrict access to the service to only trusted users.

What to do

The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.

Affected software
VendorProductAffected versions
red hat red hat openshift ai (rhoai) All versions
Original advisory text
Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization
A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's application programming interface (API) keys into the request. This flaw allows an attacker to perform unauthorized requests and consume another tenant's large language model (LLM) resources and quotas.
References
Fix within
Internet-facing 60 days
Internal At next upgrade
  • Not known to be exploited
  • Needs hands-on effort to exploit (estimated)
  • Gives an attacker partial control (estimated)
Severity
9.1 Critical
Exploitation
<1% chance of attack within 30 days
Type
CWE-639Authorization Bypass Through User-Controlled Key
Timeline
Published28 Oct 2026
Updated29 Oct 2026
First seen28 Oct 2026
Sources
CVE-2026-117574 · NVD
CVE-2026-117574 · MITRE
Track software like this
Free during beta