Signal is active with 1 mentions in latest observed window
Recommended action window: Monitor and triage in normal cycle
NVD description
A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure of Kubernetes Service Account tokens through a NodeJS endpoint. This could enable an attacker to gain unauthorized access to Kubernetes resources.
Priority
LOW
Exploitation
NONE
PoC
NONE
Patch
NONE
Momentum
STABLE
If you run products in this scope, you should treat this CVE as relevant to your environment.
2 versions affected across 1 product
| Date | Total | Labels |
|---|
| 2026-04-10 | 3 | Disclosure3 |
| 2026-04-11 | 1 | Disclosure1 |
A new vulnerability with increased severity was disclosed for Red Hat OpenShift AI (CVE-2026-5483) https://vuldb.com/vuln/356852
Post summary
CVE‑2026‑5483, a new vulnerability with higher severity, has been disclosed for Red Hat OpenShift AI; details are available at the provided vuldb link.
CVE-2026-5483 A flaw was found in odh-dashboard in Red Hat Openshift AI. This vulnerability in the `odh-dashboard` component of Red Hat OpenShift AI (RHOAI) allows for the disclosure… https://www.cve.org/CVERecord?id=CVE-2026-5483
Post summary
A vulnerability (CVE‑2026‑5483) was discovered in the odh-dashboard component of Red Hat OpenShift AI, potentially allowing information disclosure. No PoC, exploit, patch, or detailed technical information is provided.
CVE-2026-5483 Kubernetes Service Account Token Disclosure in Red Hat OpenShift AI Dashb... https://vulmon.com/vulnerabilitydetails?qid=CVE-2026-5483 Vulnerability Notification: https://alerts.vulmon.com/?utm_source=twitter&utm_medium=social&utm_campaign=2102281&utm_content=3
Post summary
The content references CVE-2026-5483, a Kubernetes Service Account Token Disclosure in Red Hat OpenShift AI Dashboard, and provides notification links but offers no additional technical or exploit information.
[CVE-2026-5483: HIGH] Critical vulnerability in odh-dashboard in Red Hat Openshift AI allows disclosure of Kubernetes Service Account tokens via NodeJS endpoint, leading to unauthorized access.#cve,CVE-2026-5483,#cybersecurity https://cvefind.com/CVE-2026-5483
Post summary
A critical info‑disclosure vulnerability (CVE-2026-5483) in Red Hat OpenShift AI’s odh‑dashboard could expose Kubernetes Service Account tokens via a NodeJS endpoint, enabling unauthorized access, but no PoC, exploit, or patch details are mentioned.
3 of 3 entries
| Part | Vendor | Product | Version | Target SW | Target HW |
|---|---|---|---|---|---|
| App | redhat | openshift_ai | - | - | - |
| App | redhat | openshift_ai | 3.2 | - | - |
| App | redhat | openshift_ai | 3.3 | - | - |