CVE-2024-7557
Odh-dashboard: odh-model-controller: cross-model authentication bypass in openshift ai
CVSS Score
8.8
EPSS Score
0.0%
EPSS Percentile
0th
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens, visible in the UI, can be utilized with oc --token={token} to exploit the elevated view privileges associated with the ServiceAccount, leading to unauthorized access to additional resources.
| CWE | CWE-305 |
| Published | Aug 8, 2024 |
| Last Updated | Mar 19, 2026 |
Stay Ahead of the Next One
Get instant alerts for
Be the first to know when new high vulnerabilities are published — delivered to Slack, Telegram or Discord.
Get Free Alerts →
Free · No credit card · 60 sec setup
CVSS v3 Breakdown
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H Attack Vector
Network
Attack Complexity
Low
Privileges Required
Low
User Interaction
None
Scope
Unchanged
Confidentiality
High
Integrity
High
Availability
High
Affected Versions
Red Hat / Red Hat OpenShift AI (RHOAI)
All versions affected Red Hat / Red Hat OpenShift AI (RHOAI)
All versions affected Red Hat / Red Hat OpenShift Data Science (RHODS)
All versions affected Red Hat / Red Hat OpenShift Data Science (RHODS)
All versions affected References
Credits
Red Hat would like to thank Adam Bellusci (RedHat) for reporting this issue.