CVE-2026-16456 Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy
An authenticated user can read sensitive secrets from other namespaces due to improper namespace validation in the model controller.
- Exploited in the wild
- Not known
- Login needed
- Any signed-in user
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-16456?
CVE-2026-16456 is a medium-severity vulnerability in Red Hat OpenShift AI 2.25, published on 10 Aug 2026. Any signed-in user can exploit it over the network, with no action from the victim.
Official description
A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the `loadSecret` function. This function improperly reads the Secret namespace from user-controlled input without validation. This allows an attacker to read sensitive API keys and cloud credentials from other namespaces, leading to information disclosure.
Weakness: CWE-441
Which versions are affected by CVE-2026-16456?
How do I fix CVE-2026-16456?
No fix has been published for CVE-2026-16456 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-16456 being exploited?
There is no known exploitation of CVE-2026-16456 in the wild and no public exploit code.
Sources
Also known as GHSA-w7qg-jg9c-w9mm.