Track vulnerabilities like this one.
Sign up free to get alerted when software you use is affected.
9.1
CVE-2026-83493: Red Hat OpenShift AI can leak secrets via pull request
CVE-2026-83493 · published today
Summary
A workflow used in Red Hat OpenShift AI can run code from a pull request while still having access to the repository’s private tokens. An attacker who submits a crafted pull request could steal those tokens, giving them access to the Snyk integration and potentially the repository itself. Update the workflow to run only trusted code or remove the secret exposure to protect the system.
What to do
The CVE record does not list a fixed version. Check the vendor's site or the advisory links below - a fix may already be released.
Affected software
| Vendor | Product | Affected versions |
|---|---|---|
| red hat | red hat openshift ai (rhoai) | All versions |
Original advisory text
Distributed-workloads: github actions pinned by mutable tag/branch, including third-party snyk/actions/setup@master
A flaw was found in distributed-workloads. A remote attacker could exploit a vulnerability in the pull_request_target workflow by submitting a specially crafted pull request. This workflow processes untrusted code from the pull request author while operating with the base repository's sensitive secrets, such as the SNYK_TOKEN, and its default write token. Consequently, an attacker could exfiltrate these secrets, leading to unauthorized access to the Snyk integration and potential control over the repository.
References
- https://access.redhat.com/security/cve/CVE-2026-83493 vdb-entry x_refsource_REDHAT
- https://bugzilla.redhat.com/show_bug.cgi?id=2526349 issue-tracking x_refsource_REDHAT
Severity
9.1
Critical
Type
CWE-829Inclusion of Functionality from Untrusted Control Sphere
Timeline
Published6 Nov 2026
Updated6 Nov 2026
First seen6 Nov 2026
Track software like this
Free during beta