CVE-2026-5483
HIGHOdh-dashboard: odh dashboard kubernetes service account exposure
Title source: cnaDescription
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
References (6)
Scores
CVSS v3
8.5
EPSS
0.0006
EPSS Percentile
18.6%
Attack Vector
NETWORK
CVSS:3.1/AV:N/AC:H/PR:L/UI:N/S:C/C:H/I:H/A:H
CISA SSVC
Vulnrichment
Exploitation
none
Automatable
no
Technical Impact
total
Details
CWE
CWE-201
Status
published
Products (12)
Red Hat/Red Hat OpenShift AI (RHOAI)
Red Hat/Red Hat OpenShift AI 2.16
1775230902
Red Hat/Red Hat OpenShift AI 2.16
sha256:0a983da3de4ce816435e23da23c4b6f373008aaf2df2b9820bdcc77a9a110341
Red Hat/Red Hat OpenShift AI 2.25
1775234711
Red Hat/Red Hat OpenShift AI 2.25
sha256:15ee3fb5fedf759e82c8de8020da1931c9de8138737f1cc7cf6622847a52887f
Red Hat/Red Hat OpenShift AI 3.2
1775523049
Red Hat/Red Hat OpenShift AI 3.2
sha256:0bdb9912d41d799b0237fe75f3fdc843983ab4ebfe6b5a47f7d4a00a642c72cd
Red Hat/Red Hat OpenShift AI 3.3
1775239958
Red Hat/Red Hat OpenShift AI 3.3
sha256:14ee2bbd445b8a988c487d4b4a7b02ff9afe1c07034b4bba073a5a8263e3293e
redhat/openshift_ai
3.2
... and 2 more
Published
Apr 10, 2026
Tracked Since
Apr 10, 2026