CVE-2026-18608 Privilege escalation in Red Hat OpenShift AI 2.25
Excessive ClusterRole permissions in the Data Science Pipelines Operator allow attackers to gain full administrative control over the Kubernetes cluster if the operator pod is compromised.
- Exploited in the wild
- Not known
- Login needed
- An administrator
- Attackable
- Over the internet
- Victim action needed
- Not needed
- Fix
- None listed
What is CVE-2026-18608?
CVE-2026-18608 is a high-severity vulnerability in Red Hat OpenShift AI 2.25, published on 10 Aug 2026. An attacker needs administrator access to exploit it, with no action from the victim.
Official description
A flaw was found in the Data Science Pipelines Operator (DSPO). The operator's ClusterRole, which defines its permissions, includes extensive privileges beyond what is necessary for its operation. These excessive permissions, such as the ability to execute commands within pods and manage cluster-wide roles, could be exploited. If the DSPO pod were compromised, an attacker could leverage these privileges to gain full administrative control over the entire Kubernetes cluster.
Weakness: CWE-250
Which versions are affected by CVE-2026-18608?
How do I fix CVE-2026-18608?
No fix has been published for CVE-2026-18608 yet. Limit exposure of the affected software until one is available.
Is CVE-2026-18608 being exploited?
There is no known exploitation of CVE-2026-18608 in the wild and no public exploit code.
Sources
Also known as GHSA-vh9j-mvrr-922q.