Privilege Escalation in Red Hat OpenShift AI Overlay for Training Operator

CVE-2026-18951

What is CVE-2026-18951?

A vulnerability exists in the Red Hat OpenShift AI overlay for the training operator, where it incorrectly manages permissions for TrainJobs within the Kubernetes environment. This issue allows any user with edit ClusterRole permissions to create, modify, and delete TrainJobs. If combined with another issue that enables arbitrary pod configurations, an attacker could exploit this flaw to escalate their privileges, leading to potential arbitrary code execution in the affected namespace.

References