Riskcovery

CVE-2026-15154

Guardrails-detectors: guardrails-detectors: unauthenticated regular-expression denial of service (redos) via detector_params.regex

State
Published
Severity
6.5 Medium
Published
Jul 8, 2026
Updated
Sep 30, 2026
Reserved
Jul 8, 2026

Read the record on cve.org

Description

A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking, leading to a worker process consuming 100% CPU indefinitely and resulting in a denial of service for the entire guardrails-mediated LLM pipeline.

Scores

CVSSScoreVectorSource
3.16.5 MediumCVSS:3.1/AV:A/AC:L/PR:N/UI:N/S:U/C:N/I:N/A:Hredhat

Weaknesses

  • CWE-1333 Inefficient Regular Expression Complexity

Affected Products

ProductVersions
guardrails-detectors
  • before d857e059f8a2dedb5c7ea9a2c307c4cfd7983fd1Affected
Red Hat OpenShift AI 2.25Red Hat
  • 1784230964 and laterNot affected
Red Hat OpenShift AI 2.25Red Hat
  • 1787235925 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1785137880 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1789573032 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1783569145 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1786617316 and laterNot affected

References

Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.