Description
A flaw was found in Red Hat OpenShift AI (RHOAI) llama-stack-operator. This vulnerability allows unauthorized access to Llama Stack services deployed in other namespaces via direct network requests, because no NetworkPolicy restricts access to the llama-stack service endpoint. As a result, a user in one namespace can access another user’s Llama Stack instance and potentially view or manipulate sensitive data.
Affected products
Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.
Red Hat Red Hat OpenShift AI 2.25
Default version status: affected
sha256:c0d95dfbae20e87113ffb81026d379bb63ad300447df98b27d1bf9a83b084744 to < *unaffected
Red Hat Red Hat OpenShift AI 2.25
Default version status: affected
sha256:1d258fe98c2477e4256a9b936f412f2501fb7ca9e3b810347f9712e0d5ce5c92 to < *unaffected
Red Hat Red Hat OpenShift AI (RHOAI)
Default version status: unaffected
Red Hat Red Hat OpenShift AI (RHOAI)
Default version status: unaffected