CVE-2026-15154

Name of the Vulnerable Software and Affected Versions Red Hat OpenShift AI (affected versions not specified)

Description A Regular Expression Denial of Service (ReDoS) flaw exists in the guardrails-detectors component. A remote attacker can send specially crafted regular expressions to the public detection API, triggering catastrophic backtracking. This process causes a worker process to consume 100% CPU indefinitely, resulting in a denial of service for the entire guardrails-mediated LLM pipeline. Catastrophic backtracking occurs when a regular expression engine takes an exponential amount of time to determine that a string does not match a pattern.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.