CVE-2026-16745

Name of the Vulnerable Software and Affected Versions odh-dashboard (affected versions not specified)

Description A flaw in the odh-dashboard web console component of Red Hat OpenShift AI (RHOAI) involves incorrect network binding. This allows a malicious actor within the cluster to bypass authentication and impersonate any user by providing an arbitrary access token, granting unauthorized access to the Kubernetes API. This could result in privilege escalation, information disclosure, or arbitrary code execution.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.