Skip to content
CVE PROGRAM SOURCE RECORD8.8 High

CVE-2026-13717

Rhoai maas: llm-d: maas/llm-d inference gateway: default allowedroutes.namespaces.from: all allows namespace users to hijack shared model-serving traffic (tokens, prompts, outputs)

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

llm-d

Default version status: unaffected

  • 0 to < *affected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1786123541 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1787153684 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1791468368 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1790958159 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1793001859 to < *unaffected

Red Hat Red Hat OpenShift AI (RHOAI)

Default version status: affected

References