VULNERABILITY INTELLIGENCE
CVE-2026-13717
CVSS score8.8 HIGH
EPSS probability0.57%
CISA KEVNot currently listed
Published2026-08-10
Last modified2026-10-29
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
Description
A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.
Weakness classification
- CWE-284: Improper Access Control