---
id: CVE-2026-83495
title: >-
  Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref
  injection for namespace secret exfiltration
summary: >-
  A flaw was found in the Trainer v2 TrainJob API. A user with permissions to
  create TrainJobs can exploit this by injecting `valueFrom.secretKeyRef` into
  environment variable definitions. This allows them to read and exfiltrate
  sensitive …
severity: none
cwe:
  - CWE-269
vendor: Red Hat
product: rhoai/odh-trainer-rhel9
affected:
  - rhoai/odh-trainer-rhel9
published: '2026-11-07'
updated: '2026-11-07'
sourceUpdated: '2026-11-07T06:02:17.419Z'
source: CVEORG
sourceUrl: 'https://www.cve.org/CVERecord?id=CVE-2026-83495'
references:
  - url: 'https://access.redhat.com/security/cve/CVE-2026-83495'
  - url: 'https://bugzilla.redhat.com/show_bug.cgi?id=2526350'
    label: RHBZ#2526350
tags:
  - cve.org
ingestedAt: '2026-11-07T07:12:31.886Z'
epss: 0.00138
epssPercentile: 0.03174
---

## Overview

A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting `valueFrom.secretKeyRef` into environment variable definitions. This allows them to read and exfiltrate sensitive information (secrets) from the namespace, leading to a privilege escalation. This occurs when the TrainJob Role-Based Access Control (RBAC) is broader than the Secret read RBAC.

## Affected

- `rhoai/odh-trainer-rhel9`

## Remediation

Refer to the linked advisories for vendor-supplied fixes and affected version ranges.

### Workarounds

To mitigate this vulnerability, ensure that the Role-Based Access Control (RBAC) for users creating TrainJobs is aligned with their Secret read permissions. Alternatively, restrict the `valueFrom.secretKeyRef` field within the validating webhook to an allowlist of permitted secret names. Review and adjust RBAC policies to prevent users from creating TrainJobs with broader access to Secrets than intended.