rhoai/odh-ta-lmes-job-rhel9 vulnerabilities

CVEs whose affected-version data names the rhoai/odh-ta-lmes-job-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-17557Medium· 6.5

2w ago

Lm-evaluation-harness: lm-evaluation-harness: ssrf via job-spec model.url with bearer credential forwarding

A flaw was found in the `lm-evaluation-harness` component of Red Hat OpenShift AI. An authenticated user, able to submit an evaluation job, could exploit this by providing a malicious model URL in the `JobSpec`. This vulnerability allows…

▾ SunlitRed Hat · rhoai/odh-ta-lmes-job-rhel9EPSS 0.33%via CVEORG