Regular Expression Vulnerability in Red Hat OpenShift AI's Guardrails-Detectors

CVE-2026-15154

What is CVE-2026-15154?

A vulnerability exists in the guardrails-detectors component of Red Hat OpenShift AI that exposes systems to a Denial of Service (DoS) attack via Regular Expression Denial of Service (ReDoS). By sending specially crafted regular expressions to the public detection API, a remote attacker can trigger catastrophic backtracking in the regex engine. This condition can lead to excessive CPU usage, effectively causing the guardrails-mediated LLM pipeline to become unresponsive. As a result, resource consumption may spike to 100%, disrupting service availability for users reliant on the API.

References