Skip to content
CVE PROGRAM SOURCE RECORD7.6 High

CVE-2026-18621

Data-sciences-pipeline: dsp: v1 argo template path accepts arbitrary workflow spec, bypassing all v2 security hardening

Read JSON ↗CVE.org ↗
Status
Published
Published
Updated
Assigning organization
redhat

Description

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf of the attacker. Successful exploitation grants the attacker node-root access, enabling arbitrary code execution and full control over the underlying node.

Affected products

Version statuses are supplied by the assigning organization. Consult the original record for detailed ranges and platform conditions.

Red Hat Red Hat OpenShift AI 2.25

Default version status: affected

  • 1785189934 to < *unaffected

Red Hat Red Hat OpenShift AI 2.25

Default version status: affected

  • 1788256711 to < *unaffected

Red Hat Red Hat OpenShift AI 3.3

Default version status: affected

  • 1785187920 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1784924951 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1787173417 to < *unaffected

Red Hat Red Hat OpenShift AI 3.4

Default version status: affected

  • 1791866195 to < *unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

Red Hat Red Hat AI Inference Server

Default version status: unaffected

References