Description
A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the operator uses a cryptographically weak pseudo-random number generator (PRNG) to generate these credentials, making them predictable. Successful exploitation could lead to unauthorized access to all pipeline artifacts and metadata, resulting in significant information disclosure.
Published: 2026-08-10
Score: 7.5 High
EPSS: < 1% Very Low
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The Data Science Pipelines Operator generates MariaDB root passwords and MinIO access/secret keys using a weak pseudo-random number generator from math/rand, making the credentials predictable. An attacker who can access the MinIO Route or MariaDB Service, even without authentication, can derive these secrets and thereby gain unauthorized access to all pipeline artifacts and metadata, leading to significant information disclosure.

Affected Systems

The vulnerability affects Red Hat OpenShift AI, specifically the Data Science Pipelines Operator. Version information is not provided in the data.

Risk and Exploitability

The CVSS score of 7.5 indicates a moderate-to-high risk, and the exploit probability score is not available. The flaw is not listed in CISA KEV. An unauthenticated attacker who reaches the exposed MinIO Route or MariaDB Service can easily predict the weakly generated credentials, resulting in convenient exploitation if network exposure persists.

Generated by OpenCVE AI on August 10, 2026 at 22:38 UTC.

Remediation

Vendor Workaround

To mitigate this issue, users should explicitly provide strong, cryptographically secure credentials for MariaDB and MinIO when deploying the Data Science Pipelines Operator. Additionally, restrict network access to the MinIO and MariaDB services using OpenShift NetworkPolicies to limit exposure. Avoid exposing MinIO via public OpenShift Routes unless absolutely necessary and ensure MariaDB is not configured with an empty root password.

OpenCVE Recommended Actions

  • Explicitly provide strong, cryptographically secure credentials for MariaDB and MinIO during deployment.
  • Restrict network access to MinIO and MariaDB with OpenShift NetworkPolicies to limit exposure.
  • Avoid exposing MinIO via public OpenShift Routes unless absolutely necessary.
  • Ensure MariaDB is never configured with an empty root password.

Generated by OpenCVE AI on August 10, 2026 at 22:38 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Thu, 27 Aug 2026 16:45:00 +0000

Type Values Removed Values Added
References

Tue, 11 Aug 2026 19:00:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift_ai:2.25::el9
cpe:/a:redhat:openshift_ai:3.4::el9
References

Tue, 11 Aug 2026 18:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'yes', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Tue, 11 Aug 2026 05:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift_ai cpe:/a:redhat:openshift_ai:3.3::el9
References

Tue, 11 Aug 2026 02:30:00 +0000

Type Values Removed Values Added
First Time appeared Red Hat
Red Hat red Hat Openshift Ai (rhoai)
Vendors & Products Red Hat
Red Hat red Hat Openshift Ai (rhoai)

Tue, 11 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Mon, 10 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in the Data Science Pipelines Operator. This vulnerability allows an unauthenticated attacker to derive sensitive credentials, such as MariaDB root/user passwords and MinIO access/secret keys, if they can access the MinIO Route or MariaDB Service. The flaw occurs because the operator uses a cryptographically weak pseudo-random number generator (PRNG) to generate these credentials, making them predictable. Successful exploitation could lead to unauthorized access to all pipeline artifacts and metadata, resulting in significant information disclosure.
Title Data-science-pipelines-operator: dspo: cryptographically weak secret generation (math/rand) for db and s3 credentials
First Time appeared Redhat
Redhat openshift Ai
Weaknesses CWE-338
CPEs cpe:/a:redhat:openshift_ai
Vendors & Products Redhat
Redhat openshift Ai
References
Metrics cvssV3_1

{'score': 7.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Red Hat Red Hat Openshift Ai (rhoai)
Redhat Openshift Ai
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-08-27T15:21:21.153Z

Reserved: 2026-08-03T07:27:28.101Z

Link: CVE-2026-18611

cve-icon Vulnrichment

Updated: 2026-08-11T17:49:06.481Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-08-10T21:17:20.120

Modified: 2026-08-27T17:17:31.020

Link: CVE-2026-18611

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-08-10T18:47:54Z

Links: CVE-2026-18611 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-11T02:15:03Z

Weaknesses
  • CWE-338

    Use of Cryptographically Weak Pseudo-Random Number Generator (PRNG)