VulnSea

rhoai/odh-trainer-rhel9 vulnerabilities

CVEs whose affected-version data names the rhoai/odh-trainer-rhel9 package. Each record lists the affected and patched versions; check a specific version with the dependency checker or POST /api/sbom.

1 CVERSS

CVE-2026-83495None
today

Trainer: trainer: trainjob env passthrough enables valuefrom.secretkeyref injection for namespace secret exfiltration

A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting `valueFrom.secretKeyRef` into environment variable definitions. This allows them to read and exfiltrate sensitive …

▾ SunlitRed Hat · rhoai/odh-trainer-rhel9EPSS 0.14%via CVEORG
rhoai/odh-trainer-rhel9 vulnerabilities (CVEs) · VulnSea