VULNERABILITY INTELLIGENCE

CVE-2026-86332

CVSS score6.5 MEDIUM

EPSS probability0.49%

CISA KEVNot currently listed

Published2026-09-07

Last modified2026-10-22

Description

A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.