CVE-2026-13717

Published: Aug 10, 2026Modified: Aug 27, 2026

8.8

Vector

CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

Exploitability: 2.8 / Impact: 5.9

Source: secalert@redhat.com (Secondary)

Description

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.

Related CWEs

CWE-284

Improper Access Control

The product does not restrict or incorrectly restricts access to a resource from an unauthorized actor.

References (4)

https://access.redhat.com/errata/RHSA-2026:53262

Source: secalert@redhat.com

https://access.redhat.com/errata/RHSA-2026:60520

Source: secalert@redhat.com

https://access.redhat.com/security/cve/CVE-2026-13717

Source: secalert@redhat.com

https://bugzilla.redhat.com/show_bug.cgi?id=2494203

Source: secalert@redhat.com

Timeline

No history available yet.