Riskcovery

CVE-2026-18621

Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

State
Published
Severity
7.6 High
Published
Aug 10, 2026
Updated
Oct 19, 2026
Reserved
Aug 3, 2026

Read the record on cve.org

Description

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf of the attacker. Successful exploitation grants the attacker node-root access, enabling arbitrary code execution and full control over the underlying node.

Scores

CVSSScoreVectorSource
3.17.6 HighCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:Lredhat

Weaknesses

  • CWE-266 Incorrect Privilege Assignment

Affected Products

ProductVersions
Red Hat OpenShift AI 2.25Red Hat
  • 1785189934 and laterNot affected
Red Hat OpenShift AI 2.25Red Hat
  • 1788256711 and laterNot affected
Red Hat OpenShift AI 3.3Red Hat
  • 1785187920 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1784924951 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1787173417 and laterNot affected
Red Hat OpenShift AI 3.4Red Hat
  • 1791866195 and laterNot affected
Red Hat AI Inference ServerRed Hat
    Red Hat AI Inference ServerRed Hat
      Red Hat AI Inference ServerRed Hat
        Red Hat AI Inference ServerRed Hat
          Red Hat AI Inference ServerRed Hat
            Red Hat AI Inference ServerRed Hat
              Red Hat AI Inference ServerRed Hat
                Red Hat AI Inference ServerRed Hat
                  Red Hat AI Inference ServerRed Hat
                    Red Hat AI Inference ServerRed Hat
                      Red Hat AI Inference ServerRed Hat
                        Red Hat AI Inference ServerRed Hat
                          Red Hat AI Inference ServerRed Hat

                            References

                            Every record here comes from the CVE Program’s CVE List. © 1999–2026 The MITRE Corporation. CVE is a registered trademark of The MITRE Corporation. The records are reproduced under the CVE Program terms of use.