Changeflow GovPing Data Privacy & Cybersecurity Red Hat OpenShift AI Vulnerability Enables Info...
Urgent Guidance Amended Final

Red Hat OpenShift AI Vulnerability Enables Information Disclosure and Privilege Escalation

Favicon for wid.cert-bund.de CERT-Bund Security Advisories
Published
Detected
Email

Summary

CERT-Bund issued a security advisory regarding a vulnerability in Red Hat OpenShift AI (affecting versions 2.16.4, 2.25.4, 3.3.1, and 3.2). The vulnerability, with a CVSS Base Score of 8.5 (high) and Temporal Score of 7.4 (high), allows a remote, authenticated attacker to exploit the flaw to disclose confidential information and potentially escalate privileges. Mitigation measures are available.

View original document View source feed page

What changed

CERT-Bund published a security advisory identifying a high-severity vulnerability in Red Hat OpenShift AI across four specific versions (2.16.4, 2.25.4, 3.3.1, and 3.2). The vulnerability enables remote authenticated attackers to disclose confidential information and potentially escalate their privileges. The CVSS score of 8.5 reflects high severity with a temporal degradation to 7.4.

Organizations using affected Red Hat OpenShift AI versions should prioritize applying available mitigations, reviewing systems for signs of compromise, and monitoring for official patches. The vulnerability affects Unix-based operating systems and represents a significant risk to cloud platform deployments using this PaaS solution.

What to do next

  1. Apply available mitigation measures for Red Hat OpenShift AI vulnerability
  2. Review systems for indicators of exploitation
  3. Monitor for CVE updates and patches

Archived snapshot

Apr 14, 2026

GovPing captured this document from the original source. If the source has since changed or been removed, this is the text as it existed at that time.

[WID-SEC-2026-1056] Red Hat OpenShift AI: Schwachstelle ermöglicht Offenlegung von Informationen und Privilegieneskalation CVSS Base Score 8.5 (hoch) CVSS Temporal Score 7.4 (hoch) Remoteangriff ja Datum 12.04.2026 Stand 13.04.2026 Mitigation ja

Betroffene Systeme

Betriebssystem

  • UNIX

Produktbeschreibung

Red Hat OpenShift ist eine "Platform as a Service" (PaaS) Lösung zur Bereitstellung von Applikationen in der Cloud.

Produkte

12.04.2026
- Red Hat OpenShift AI 2.16.4

  • Red Hat OpenShift AI 2.25.4

  • Red Hat OpenShift AI 3.3.1

  • Red Hat OpenShift AI 3.2

Angriff

Angriff

Ein entfernter, authentisierter Angreifer kann eine Schwachstelle in Red Hat OpenShift AI ausnutzen, um vertrauliche Informationen offenzulegen und so möglicherweise seine Berechtigungen zu erweitern. CVE Informationen Versionshistorie Feedback zum Advisory geben

Related changes

Favicon for wid.cert-bund.de sudo Vulnerability Enables Privilege Escalation - CVSS 7.4
Urgent Apr 07, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de VMware Tanzu Spring Cloud Vulnerability Allows Information Disclosure
Priority review Mar 24, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity
Favicon for wid.cert-bund.de Red Hat Enterprise Linux crun Privilege Escalation Vulnerability, CVSS 7.8
Priority review Apr 08, 2026 • CERT-Bund Security Advisories • Data Privacy & Cybersecurity

Get daily alerts for CERT-Bund Security Advisories

Daily digest delivered to your inbox.

Free. Unsubscribe anytime.

Source

Favicon for wid.cert-bund.de
CERT-Bund Security Advisories wid.cert-bund.de/content/public/securityAdvisory/rss
Data Privacy & Cybersecurity

About this page

What is GovPing?

Every important government, regulator, and court update from around the world. One place. Real-time. Free. Our mission

What's from the agency?

Source document text, dates, docket IDs, and authority are extracted directly from CERT-Bund.

What's AI-generated?

The summary, classification, recommended actions, deadlines, and penalty information are AI-generated from the original text and may contain errors. Always verify against the source document.

Last updated

Press inquiries →

Classification

Agency
CERT-Bund
Published
April 12th, 2026
Instrument
Guidance
Legal weight
Non-binding
Stage
Final
Change scope
Substantive
Document ID
WID-SEC-2026-1056

Who this affects

Applies to
Technology companies Manufacturers
Industry sector
5112 Software & Technology
Activity scope
Vulnerability management Patch management Cloud platform security
Geographic scope
Germany DE

Taxonomy

Primary area
Cybersecurity
Operational domain
IT Security
Compliance frameworks
NIST CSF
Topics
Information Security Cloud Computing

Browse Categories

Agriculture & Food Safety 64 AI Regulation 3 Banking & Finance 292 Consumer Protection 45 Courts & Legal 361 Data Privacy & Cybersecurity 76 Defense & National Security 51 Education 21 Energy 100 Environment 86 Environmental & Energy 4 Environmental Regulation 7 Financial Regulation 2 Government & Legislation 279 Government Operations 2 Healthcare 136 Healthcare & Life Sciences 3 Housing 16 Immigration 8 Immigration & Border Control 1 Insurance 58 Labor & Employment 113 Legal & Judicial 5 Pharma & Drug Safety 104 Public Health 2 Real Estate & Housing 2 Sanctions & Export Controls 1 Securities & Markets 103 Securities Regulation 6 Tax 65 Telecom & Technology 47 Trade & Commerce 2 Trade & Sanctions 135 Transportation 58

Get alerts for this source

We'll email you when CERT-Bund Security Advisories publishes new changes.

Free. Unsubscribe anytime.

You're subscribed!