Description
A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the spec.database.customExtraParams field, which allows for the injection of dangerous parameters into the MySQL Data Source Name (DSN) string. By manipulating these parameters, an attacker can enable LOCAL INFILE functionality and exfiltrate sensitive files, such as the service account token, from the operator pod. This can lead to privilege escalation, allowing a namespace editor to gain cluster-admin privileges.
Published: 2026-08-10
Score: 8.8 High
EPSS: n/a
KEV: No
Impact: n/a
Action: n/a
AI Analysis

Impact

The vulnerability resides in the Data Science Pipelines Operator, where the specification of database.customExtraParams can be manipulated to inject harmful parameters into the MySQL Data Source Name. By doing so, an attacker can enable the LOCAL INFILE option and exfiltrate files from the operator pod, including sensitive artifacts like the service account token.

Affected Systems

This flaw affects Red Hat OpenShift AI deployments that include the Data Science Pipelines Operator. No specific version range is supplied, so any installation in which the operator is running is potentially vulnerable.

Risk and Exploitability

The CVSS score of 8.8 indicates high severity, and the lack of an EPSS score or KEV listing suggests limited public exploitation data. The attack requires only namespace editing privileges, which grants the attacker the ability to contact the operator pod and craft a malicious DSN, making the vulnerability readily actionable for anyone with that level of access.

Generated by OpenCVE AI on August 10, 2026 at 22:57 UTC.

Remediation

Vendor Workaround

Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

OpenCVE Recommended Actions

  • Revoke or tighten the namespace editor role so it cannot modify the spec.database.customExtraParams field in the DSPO configuration.
  • Disable the LOCAL INFILE functionality on the MySQL instances accessed by DSPO, or restrict it via MySQL server configuration.
  • Use stricter RBAC to protect service account tokens and ensure pods cannot read them, or store secrets in a more secure manner.
  • Monitor logs for DSPO configuration changes and unauthorized file reads from pods.
  • Review CNA's available mitigations, noting none meet criteria; no effective workaround at this time.

Generated by OpenCVE AI on August 10, 2026 at 22:57 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 11 Aug 2026 05:15:00 +0000

Type Values Removed Values Added
CPEs cpe:/a:redhat:openshift_ai cpe:/a:redhat:openshift_ai:3.3::el9
References

Tue, 11 Aug 2026 00:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Important

Mon, 10 Aug 2026 21:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in the Data Science Pipelines Operator (DSPO). A namespace editor can exploit a vulnerability in the spec.database.customExtraParams field, which allows for the injection of dangerous parameters into the MySQL Data Source Name (DSN) string. By manipulating these parameters, an attacker can enable LOCAL INFILE functionality and exfiltrate sensitive files, such as the service account token, from the operator pod. This can lead to privilege escalation, allowing a namespace editor to gain cluster-admin privileges.
Title Data-science-pipelines-operator: dspo: mysql dsn parameter injection via customextraparams enables local infile file exfiltration from operator pod
First Time appeared Redhat
Redhat openshift Ai
Weaknesses CWE-915
CPEs cpe:/a:redhat:openshift_ai
Vendors & Products Redhat
Redhat openshift Ai
References
Metrics cvssV3_1

{'score': 8.8, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H'}

Subscriptions

Redhat Openshift Ai
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-08-11T04:41:22.890Z

Reserved: 2026-08-03T07:34:17.138Z

Link: CVE-2026-18617

cve-icon Vulnrichment

No data.

cve-icon NVD

No data.

cve-icon Redhat

Severity : Important

Publid Date: 2026-08-10T18:48:25Z

Links: CVE-2026-18617 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-08-10T23:00:07Z

Weaknesses
  • CWE-915

    Improperly Controlled Modification of Dynamically-Determined Object Attributes