CVE record · 1 source
CVE-2026-13451
CVSS 7.7A flaw was found in KServe.
- Vendor
- Red Hat
- Product
- Red Hat OpenShift AI (RHOAI)
- CVSS v3.1
- 7.7 AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N
- Weakness
- CWE-918
- Exposure class
- Developer platform
Coverage
1Every item in the archive that references this CVE, highest rank first. Headlines open the publisher.
-
A flaw was found in KServe.
A flaw was found in KServe. A namespace-scoped user with create/update permissions on InferenceService custom resources can exploit this vulnerability by providing a malicious `storageUri`. This Server-Side Request Forgery (SSRF)…