Impersonation Flaw in Red Hat OpenShift AI's Web Console

CVE-2026-16745

What is CVE-2026-16745?

A vulnerability exists in the web console component of Red Hat OpenShift AI, allowing attackers within the cluster to bypass authentication. By exploiting incorrect network binding, a malicious actor can impersonate any user by presenting an arbitrary access token. This exploitation provides unauthorized access to the Kubernetes API, posing severe risks such as arbitrary code execution, privilege escalation, and information disclosure.

References