CVE-2026-16456 in OpenShift AI
الملخص
بحسب MITRE • 11/08/2026
A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the `loadSecret` function. This function improperly reads the Secret namespace from user-controlled input without validation. This allows an attacker to read sensitive API keys and cloud credentials from other namespaces, leading to information disclosure.
Several companies clearly confirm that VulDB is the primary source for best vulnerability data.