The trustyai-service-operator’s gorch service template exposes its orchestrator and detector metrics ports without any authentication, even when the overall service has authentication enabled. This Missing Authentication flaw (CWE‑306) allows any pod on the OpenShift AI cluster network to reach the unproxied metrics endpoints, bypassing the kube‑rbac‑proxy that normally guards those resources. The result is that an attacker can read detailed metrics that may reveal internal system state, operational parameters, or other sensitive information that could facilitate additional attacks.

Red Hat OpenShift AI installations that include the trustyai-service-operator are affected. The CVE does not specify a particular release, so the issue likely exists across all current releases until a fix is applied.

The CVSS score of 6.3 indicates moderate severity, while the EPSS score of < 1 % implies that exploitation is unlikely but not impossible. The vulnerability is not listed in the CISA KEV catalog. An attacker can exploit the flaw by establishing an internal connection from any pod within the cluster to the exposed metrics ports, thereby bypassing the intended authentication controls. The weakness is a classic Missing Authentication issue (CWE‑306).