rhoai/odh-model-controller-rhel9 vulnerabilities
CVEs whose affected-version data names the rhoai/odh-model-controller-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.
2 CVEsRSS
CVE-2026-108334High· 7.4A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator
A flaw was found in the internal WebAssembly (WASM) shim used by the Kuadrant operator. When generating the CEL predicate that determines whether Gateway-level authentication and rate limiting should run, the shim does not correctly esca…
▾ TwilightRed Hat · rhcl-1/developer-portal-controller-rhel9EPSS 0.34%via NVD
CVE-2026-13717High· 8.8Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. Thi…
▾ TwilightRed Hat · llm-dEPSS 0.57%via CVEORG