CVE-2026-18951

HighCVSS 8.8

Published: 10/08/2026(UTC)Updated: 27/08/2026(UTC)Translated: 11/08/2026(UTC)NVD NIST

Exploitation Probability (EPSS)

Low risk

0.57%

45th percentile - higher than 45% of all known CVEs

Summary

A vulnerability in the RHOAI overlay for the training operator incorrectly aggregates trainjobs management permissions into the native Kubernetes 'edit ClusterRole'. This allows any user with edit permissions in a namespace to create, modify, and delete TrainJobs, which combined with another vulnerability can lead to privilege escalation and remote code execution.

Risk Assessment

A user with namespace editor privileges can escalate privileges and potentially execute arbitrary code, threatening the security of the entire cluster.

Recommendation

Apply patches to the RHOAI overlay and review role configurations to avoid excessive permissions.

Original NVD description (English source)

A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespace to create, modify, and delete `TrainJobs`. When combined with a separate vulnerability (TRN-01) that permits arbitrary pod configurations, a remote attacker with namespace editor privileges could exploit this to escalate privileges, potentially leading to arbitrary code execution.