https://cve.radiocsirt.org Contains only the most 10 recent entries. http://www.rssboard.org/rss-specification python-feedgen en Fri, 02 Oct 2026 15:33:53 +0000 https://cve.radiocsirt.org/vuln/euvd-2026-348568 EUVD-2026-348568 https://cve.radiocsirt.org/vuln/euvd-2026-348568 https://cve.radiocsirt.org/vuln/fkie_cve-2025-12103 <p>A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster.</p> <p>TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster</p> <p>Additionally users can access all `persistentvolumeclaims` and `lmevaljobs`</p> <p>A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster.</p> <p>TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster</p> <p>Additionally users can access all `persistentvolumeclaims` and `lmevaljobs`</p> https://cve.radiocsirt.org/vuln/fkie_cve-2025-12103 https://cve.radiocsirt.org/vuln/ghsa-hrh8-rvch-7hh9 <p>A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster.</p> <p>TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster</p> <p>Additionally users can access all `persistentvolumeclaims` and `lmevaljobs`</p> <p>A flaw was found in Red Hat Openshift AI Service. The TrustyAI component is granting all service accounts and users on a cluster permissions to get, list, watch any pod in any namespace on the cluster.</p> <p>TrustyAI is creating a role `trustyai-service-operator-lmeval-user-role` and a CRB `trustyai-service-operator-default-lmeval-user-rolebinding` which is being applied to `system:authenticated` making it so that every single user or service account can get a list of pods running in any namespace on the cluster</p> <p>Additionally users can access all `persistentvolumeclaims` and `lmevaljobs`</p> https://cve.radiocsirt.org/vuln/ghsa-hrh8-rvch-7hh9 https://cve.radiocsirt.org/vuln/rhsa-2025:21117 <p>openshift-ai: Trusty AI Grants All Authenticated users to list pods in any namespace</p> <p>openshift-ai: Trusty AI Grants All Authenticated users to list pods in any namespace</p> https://cve.radiocsirt.org/vuln/rhsa-2025:21117 https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2585 <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift AI ausnutzen, um Informationen offenzulegen.</p> <p>Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift AI ausnutzen, um Informationen offenzulegen.</p> https://cve.radiocsirt.org/vuln/wid-sec-w-2025-2585