rhoai/odh-kserve-controller-rhel9 vulnerabilities
CVEs whose affected-version data names the rhoai/odh-kserve-controller-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-13451High· 7.7Kserve: kserve: server-side request forgery via malicious storageuri
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF) vulnera…
▾ TwilightRed Hat · rhoai/odh-kserve-agent-rhel9EPSS 0.21%via CVEORG
CVE-2026-13717High· 8.8Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. Thi…
▾ TwilightRed Hat · llm-dEPSS 0.57%via CVEORG