Description (CNA)
A flaw was found in `guardrails-detectors`, a component of Red Hat OpenShift AI. This vulnerability, known as Regular Expression Denial of Service (ReDoS), allows a remote attacker to provide specially crafted regular expressions to the public detection API. This can cause catastrophic backtracking, leading to a worker process consuming 100% CPU indefinitely and resulting in a denial of service for the entire guardrails-mediated LLM pipeline.
Affected (CNA)
| Vendor / product | Versions |
|---|---|
| Not supplied / Not supplied | affected 0 before d857e059f8a2dedb5c7ea9a2c307c4cfd7983fd1 |
| Red Hat / Red Hat OpenShift AI 2.25 | unaffected 1784230964 before * |
| Red Hat / Red Hat OpenShift AI 2.25 | unaffected 1787235925 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1785137880 before * |
| Red Hat / Red Hat OpenShift AI 3.3 | unaffected 1789573032 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1783569145 before * |
| Red Hat / Red Hat OpenShift AI 3.4 | unaffected 1786617316 before * |
CWE
CWE-1333
References
- https://access.redhat.com/errata/RHSA-2026:53261
- https://access.redhat.com/errata/RHSA-2026:53262
- https://access.redhat.com/errata/RHSA-2026:53263
- https://access.redhat.com/errata/RHSA-2026:60520
- https://access.redhat.com/errata/RHSA-2026:65126
- https://access.redhat.com/errata/RHSA-2026:73987
- https://access.redhat.com/security/cve/CVE-2026-15154
- https://bugzilla.redhat.com/show_bug.cgi?id=2498188
ADP enrichment
No English description supplied.
No references supplied.