CVE-2026-5483

HIGH

Odh-dashboard: odh dashboard kubernetes service account exposure

Title source: cna
STIX 2.1

Description

A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.

References (6)

Core 6
Core References
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:7397
https://access.redhat.com/errata/RHSA-2026:7397
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:7398
https://access.redhat.com/errata/RHSA-2026:7398
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:7403
https://access.redhat.com/errata/RHSA-2026:7403
Vendor Advisory vendor-advisory x_refsource_redhat
RHSA-2026:7404
https://access.redhat.com/errata/RHSA-2026:7404
Vdb Entry, X_Refsource_Redhat vdb-entry x_refsource_redhat
https://access.redhat.com/security/cve/CVE-2026-5483
Issue Tracking, X_Refsource_Redhat issue-tracking x_refsource_redhat
RHBZ#2454764
https://bugzilla.redhat.com/show_bug.cgi?id=2454764

Scores

CVSS v3 8.5
EPSS 0.0048
EPSS Percentile 37.5%
Attack Vector NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H

CISA SSVC

Vulnrichment
Exploitation none
Automatable no
Technical Impact total

Details

CWE
CWE-201
Status published
Products (12)
Red Hat/Red Hat OpenShift AI (RHOAI)
Red Hat/Red Hat OpenShift AI 2.16 1775230902
Red Hat/Red Hat OpenShift AI 2.16 sha256:0a983da3de4ce816435e23da23c4b6f373008aaf2df2b9820bdcc77a9a110341
Red Hat/Red Hat OpenShift AI 2.25 1775234711
Red Hat/Red Hat OpenShift AI 2.25 sha256:15ee3fb5fedf759e82c8de8020da1931c9de8138737f1cc7cf6622847a52887f
Red Hat/Red Hat OpenShift AI 3.2 1775523049
Red Hat/Red Hat OpenShift AI 3.2 sha256:0bdb9912d41d799b0237fe75f3fdc843983ab4ebfe6b5a47f7d4a00a642c72cd
Red Hat/Red Hat OpenShift AI 3.3 1775239958
Red Hat/Red Hat OpenShift AI 3.3 sha256:14ee2bbd445b8a988c487d4b4a7b02ff9afe1c07034b4bba073a5a8263e3293e
redhat/openshift_ai 3.2
... and 2 more
Published Apr 10, 2026
Tracked Since Apr 10, 2026