CVE-2026-15044

Name of the Vulnerable Software and Affected Versions TrustyAI Service Operator (affected versions not specified)

Description A flaw in the TrustyAI Service Operator occurs when deploying services such as gorch or NemoGuardrails. If a specific security setting is not enabled, these services expose their communication channels without requiring user authentication. This allows any other program within the cluster to access the AI guardrails and orchestrator without proper authorization, potentially leading to unauthorized access to sensitive information and limited modifications to AI models.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.