CVE-2026-5483 Odh-dashboard: odh dashboard kubernetes service account exposure

High 8.5 Published 10 Apr 2026 Updated 15 Jul 2026

Attackers can disclose Kubernetes Service Account tokens via a NodeJS endpoint, enabling unauthorized access to cluster resources.

Exploited in the wild: Not known
Login needed: Any signed-in user
Attackable: Over the internet
Victim action needed: Not needed
Fix: None listed

What is CVE-2026-5483?

CVE-2026-5483 is a high-severity vulnerability in Red Hat OpenShift AI (RHOAI), published on 10 Apr 2026. Any signed-in user can exploit it over the network, with no action from the victim.

Official description

A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.

Weakness: CWE-201

Which versions are affected by CVE-2026-5483?

It affects 1 product.

Products include Redhat Openshift Ai.

How do I fix CVE-2026-5483?

No fix has been published for CVE-2026-5483 yet. Limit exposure of the affected software until one is available.

Is CVE-2026-5483 being exploited?

There is no known exploitation of CVE-2026-5483 in the wild and no public exploit code.

Sources

Also known as GHSA-w59f-v72r-w493.