VULNERABILITY INTELLIGENCE
CVE-2026-18620
CVSS score7.1 HIGH
EPSS probability0.48%
CISA KEVNot currently listed
Published2026-08-10
Last modified2026-09-21
CVSS vectorCVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
Description
A flaw was found in Data Science Pipelines. A restricted user, or tenant, can exploit an improper authorization vulnerability in the setDefaultServiceAccount function. By specifying a more privileged ServiceAccount (SA) during a CreateRun request, an attacker can bypass authorization checks. This allows the tenant to run their containers with elevated privileges, potentially leading to the disclosure of sensitive information (secrets) and the ability to execute commands within other users' pods.
Weakness classification
- secalert@redhat.com: CWE-639