Denial of Service Vulnerability in PyTorch Job Management by Red Hat
CVE-2026-83494

Currently unrated

Key Information:

Vendor

Red Hat
Status
Red Hat Openshift Ai (rhoai)
Vendor
CVE Published:
6 November 2026

What is CVE-2026-83494?

A flaw in the PyTorchJob's ValidateUpdate webhook allows for incorrect object casting, leading to the bypassing of immutability checks. This weakness enables users to detach queued jobs from their quota management systems or take control over the ownership of running job controllers. The exploitation of this vulnerability can lead to significant disruptions, including the potential for Denial of Service conditions, threatening the stability of the job management operations.

References

https://access.redhat.com/security/cve/CVE-2026-83494
vdb-entryx_refsource_REDHAT
https://bugzilla.redhat.com/show_bug.cgi?id=2526348
issue-trackingx_refsource_REDHAT

Timeline

  • Vulnerability published

  • Vulnerability Reserved

.