HIGH

CVE-2026-18982

2026-08-10 CVSS v3.1

CVSS

8.8

Description

A flaw was found in the RHOAI training-operator. This vulnerability allows a user with standard edit or admin roles in any Kubernetes namespace to escalate their privileges. Through the creation of training jobs, an attacker can impersonate service accounts, access the host filesystem, and potentially execute arbitrary code remotely. This issue arises from the aggregation of training job permissions onto native Kubernetes edit and admin ClusterRoles, coupled with unrestricted PodTemplateSpec passthrough.

Weakness (CWE)

CWE-250

EPSS Score

0.53%

Probability of exploitation in next 30 days

43.8th percentile

References

https://access.redhat.com/errata/RHSA-2026:53261 https://access.redhat.com/errata/RHSA-2026:53262 https://access.redhat.com/errata/RHSA-2026:53263 https://access.redhat.com/errata/RHSA-2026:60367 https://access.redhat.com/errata/RHSA-2026:60520 https://access.redhat.com/security/cve/CVE-2026-18982 https://bugzilla.redhat.com/show_bug.cgi?id=2511648

View on dbcve.org

Base CVE data derived from NVD (public domain). Enrichment by dbcve.org (CC-BY-4.0). Fetched via API.

Back to CVE