CVE-2026-18950

Name of the Vulnerable Software and Affected Versions odh-dashboard (affected versions not specified)

Description An authenticated user can exploit a flaw in the creation of RoleBindings. The system fails to properly validate the roleRef field, enabling a user to assign arbitrary roles, such as cluster-admin. This leads to privilege escalation, allowing the attacker to obtain unauthorized elevated access within their namespace and potentially establish persistent control over the system.

Recommendations At the moment, there is no information about a newer version that contains a fix for this vulnerability.