← CVE Intelligence

CVE-2026-5483

Odh-dashboard: odh dashboard kubernetes service account exposure PUBLISHED

Description (CNA)

A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.

Affected (CNA)

Vendor / productVersions
Red Hat / Red Hat OpenShift AI 2.16unaffected 1775230902 before *
Red Hat / Red Hat OpenShift AI 2.25unaffected 1775234711 before *
Red Hat / Red Hat OpenShift AI 3.2unaffected 1775523049 before *
Red Hat / Red Hat OpenShift AI 3.3unaffected 1775239958 before *
Red Hat / Red Hat OpenShift AI (RHOAI)unaffected
Red Hat / Red Hat OpenShift AI (RHOAI)unaffected
Red Hat / Red Hat OpenShift AI (RHOAI)unaffected

CWE

CWE-201

References

ADP enrichment

CISA-ADP

No English description supplied.

No references supplied.

redhat-SADP

A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.