rhoai/odh-maas-controller-rhel9 vulnerabilities
CVEs whose affected-version data names the rhoai/odh-maas-controller-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-15218High· 7.9A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI
A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the iden…
▾ TwilightRed Hat · maas-apiEPSS 0.71%via NVD
CVE-2026-13717High· 8.8Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. Thi…
▾ TwilightRed Hat · llm-dEPSS 0.57%via CVEORG