rhoai/odh-ai-gateway-payload-processing-rhel9 vulnerabilities

CVEs whose affected-version data names the rhoai/odh-ai-gateway-payload-processing-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-117574Critical· 9.1

1w ago

Ai-gateway-payload-processing: ai-gateway-payload-processing: tenant/credential selection from client-controlled url path with no in-process authorization

A flaw was found in ai-gateway-payload-processing. An authenticated remote attacker can exploit this vulnerability by submitting a request specifying another tenant's model identifier in the request body or header. Because the service do…

▾ MidnightRed Hat · rhoai/odh-ai-gateway-payload-processing-e2e-rhel9EPSS 0.24%via CVEORG