THREATOPS

THREAT OPS › Threat News › [NVD] CVE-2026-18951 (HIGH 8.8) — A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespa

[NVD] CVE-2026-18951 (HIGH 8.8) — A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespa

lownvdPublished 2026-08-10

CVE-2026-18951 CVSS: 8.8 HIGH Published: 2026-08-10T21:17:21.710

A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespace to create, modify, and delete `TrainJobs`. When com

Indicators of compromise

CVE-2026-18951cve

Original source: https://nvd.nist.gov/vuln/detail/CVE-2026-18951