{"id":"CVE-2026-83495","title":"Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration","summary":"A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting `valueFrom.secretKeyRef` into environment variable definitions. This allows them to read and exfiltrate sensitive …","severity":"none","cwe":["CWE-269"],"vendor":"Red Hat","product":"rhoai/odh-trainer-rhel9","affected":["rhoai/odh-trainer-rhel9"],"published":"2026-11-07","updated":"2026-11-07","sourceUpdated":"2026-11-07T06:02:17.419Z","source":"CVEORG","sourceUrl":"https://www.cve.org/CVERecord?id=CVE-2026-83495","references":[{"url":"https://access.redhat.com/security/cve/CVE-2026-83495"},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2526350","label":"RHBZ#2526350"}],"tags":["cve.org"],"ingestedAt":"2026-11-07T07:12:31.886Z","epss":0.00138,"epssPercentile":0.03174,"slug":"CVE-2026-83495","body":"## Overview\n\nA flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting `valueFrom.secretKeyRef` into environment variable definitions. This allows them to read and exfiltrate sensitive information (secrets) from the namespace, leading to a privilege escalation. This occurs when the TrainJob Role-Based Access Control (RBAC) is broader than the Secret read RBAC.\n\n## Affected\n\n- `rhoai/odh-trainer-rhel9`\n\n## Remediation\n\nRefer to the linked advisories for vendor-supplied fixes and affected version ranges.\n\n### Workarounds\n\nTo mitigate this vulnerability, ensure that the Role-Based Access Control (RBAC) for users creating TrainJobs is aligned with their Secret read permissions. Alternatively, restrict the `valueFrom.secretKeyRef` field within the validating webhook to an allowlist of permitted secret names. Review and adjust RBAC policies to prevent users from creating TrainJobs with broader access to Secrets than intended.","depth":"sunlit","depthScore":3,"depthScoreParts":{"impact":2.8,"likelihood":0,"exploitation":0,"ransomware":0},"changes":[]}