---
id: CVE-2026-117574
title: >-
  Ai-gateway-payload-processing: ai-gateway-payload-processing:
  tenant/credential selection from client-controlled url path with no in-process
  authorization
summary: >-
  A flaw was found in ai-gateway-payload-processing. An authenticated remote
  attacker can exploit this vulnerability by submitting a request specifying
  another tenant's model identifier in the request body or header. Because the
  service do…
severity: critical
cvss: 9.1
cvssVector: 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L'
cvssSource: cna
cwe:
  - CWE-639
vendor: Red Hat
product: rhoai/odh-ai-gateway-payload-processing-e2e-rhel9
affected:
  - rhoai/odh-ai-gateway-payload-processing-e2e-rhel9
  - rhoai/odh-ai-gateway-payload-processing-rhel9 (all versions)
published: '2026-10-28'
updated: '2026-10-28'
sourceUpdated: '2026-10-28T20:02:14.895Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-117574'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2026-117574'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2494861'
    label: RHBZ#2494861
tags:
  - cve.org
epss: 0.00236
epssPercentile: 0.14686
ingestedAt: '2026-10-29T16:38:26.132Z'
---

## Overview

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service does not verify authorization before retrieving credentials from the shared store, it injects the target tenant's application programming interface (API) keys into the request. This flaw allows an attacker to perform unauthorized requests and consume another tenant's large language model (LLM) resources and quotas.

## Affected

- `rhoai/odh-ai-gateway-payload-processing-e2e-rhel9`
- `rhoai/odh-ai-gateway-payload-processing-rhel9 (all versions)`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.