CVE-2026-5483

No fix known EPSS <1%CVSS 8.5

A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.

Published 2026-04-10 · CVE record · OSV

Products: Red Hat OpenShift AI 2.16, Red Hat OpenShift AI 2.25, Red Hat OpenShift AI 3.2, Red Hat OpenShift AI 3.3, Red Hat OpenShift AI (RHOAI)