CVE-2026-13717
Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)
- State
- Published
- Severity
- 8.8 High
- Published
- Aug 10, 2026
- Updated
- Oct 29, 2026
- Reserved
- Jun 29, 2026
Description
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.
Scores
| CVSS | Score | Vector | Source |
|---|---|---|---|
| 3.1 | 8.8 High | CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H | redhat |
Weaknesses
- CWE-284 Improper Access Control
Affected Products
| Product | Versions |
|---|---|
llm-d |
|
Red Hat OpenShift AI 3.4Red Hat |
|
Red Hat OpenShift AI 3.4Red Hat |
|
Red Hat OpenShift AI 3.4Red Hat |
|
Red Hat OpenShift AI 3.4Red Hat |
|
Red Hat OpenShift AI 3.4Red Hat |
|
Red Hat OpenShift AI (RHOAI)Red Hat |
References
- RHSA-2026:53262vendor-advisory
- RHSA-2026:60520vendor-advisory
- RHSA-2026:84734vendor-advisory
- RHSA-2026:92510vendor-advisory
- https://access.redhat.com/security/cve/CVE-2026-13717vdb-entry
- RHBZ#2494203issue-tracking
Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.