CVE-2026-13451
waiting for further signalsZero needs more public information before it can validate it.GHSA-92xh-3g2w-c2j3 ↗EUVD-2026-112458 ↗
description
Red Hat OpenShift AI KServe components can allow the storage-initializer container to make attacker-directed outbound web requests. An attacker needs namespace-level permission to create or modify InferenceService resources; successful abuse may expose internal cluster services or node IAM credentials.
mitigation
Restrict create and update access to InferenceService resources to trusted identities, and limit storage-initializer egress to approved destinations. Block access from workloads to cloud metadata endpoints and other sensitive internal services where possible.
outcome
Contextual, not validated: no deterministic check could cover this one, and no technique passed our review.
source signals
Public signals that triggered or updated the pipeline. These are inputs for the deltas above.
- 2026-10-28 19:52Zcve_org: trigger signal, started the run
this entry in the feed
GET /api/v1/feed/CVE-2026-13451
{ "etk_id": "ETK-2026-2925", "cve_id": "CVE-2026-13451", "display_id": "CVE-2026-13451", "ghsa_id": "GHSA-92xh-3g2w-c2j3", "euvd_id": "EUVD-2026-112458", "status": "published", "anchor_state": "anchored", "title": "Server-side request forgery in OpenShift AI KServe", "summary": "Red Hat OpenShift AI KServe components can allow the storage-initializer container to make attacker-directed outbound web requests. An attacker needs namespace-level permission to create or modify InferenceService resources; successful abuse may expose internal cluster services or node IAM credentials.", "mitigation": "Restrict create and update access to InferenceService resources to trusted identities, and limit storage-initializer egress to approved destinations. Block access from workloads to cloud metadata endpoints and other sensitive internal services where possible.", "vendor": "Red Hat", "product": "Red Hat OpenShift AI (RHOAI)", "affected": [ { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "rhoai/odh-kserve-agent-rhel9", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "rhoai/odh-kserve-autogluon-server-rhel9", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "rhoai/odh-kserve-controller-rhel9", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "rhoai/odh-kserve-router-rhel9", "purl": null }, { "affected_notes": [], "affected_ranges": [], "ecosystem": null, "fixed_versions": [], "package_name": "rhoai/odh-kserve-storage-initializer-rhel9", "purl": null } ], "cwes": [ 918 ], "cvss_score": 7.7, "cvss_src": "cna_vendor", "cvss_vector": "CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:N/A:N", "epss_score": null, "epss_percentile": null, "epss_asof": null, "automation": "contextual", "check": false, "check_confidence_basis": null, "exploit": false, "pipeline_minutes": 24.768522733333334, "t0_at": "2026-10-28T19:52:51.913000+00:00", "signals": { "trigger_signal": { "at": "2026-10-28T19:52:51.913000+00:00", "days": 0, "is_lower_bound": false, "measured_at": "2026-10-28T19:52:51.913000+00:00", "url": "https://www.cve.org/CVERecord?id=CVE-2026-13451" } } }
published 2026-10-29 00:42Z
last change 2026-10-29 05:27Z
Need the technical details behind an entry?
Every entry here shows what we attempted and when. The technical details, the generated exploit that fired it and the evidence behind the verdict are not public. Tell us about your use case and we’ll get back to you about extended API access.