Description
A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).
Published: 2026-09-07
Score: 6.5 Medium
EPSS: < 1% Very Low
KEV: No
Impact: Information Disclosure
Action: Apply Patch
AI Analysis

Impact

The odh-dashboard component of Red Hat OpenShift AI contains a route that returns the full Kubernetes Secret object, including its data field, when a GET request is made to "/api/nim-serving/:nimResource". The route performs no authorization check on the read action, thereby allowing any authenticated dashboard user to retrieve the NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are restricted to admins, but the read path is not, creating a significant information‑disclosure weakness (CWE‑862).

Affected Systems

This flaw is present in the Red Hat OpenShift AI product suite, specifically affecting the odh-dashboard component. No version ranges are supplied in the available data, so any deployment of RHOAI with the affected dashboard image is potentially impacted.

Risk and Exploitability

With a CVSS score of 6.5, the vulnerability poses a moderate severity risk. The EPSS score is not available, and the flaw is not currently listed in CISA KEV. The attack vector requires a valid authenticated dashboard session; an attacker who can log into the dashboard can immediately retrieve sensitive secrets via the read route.

Generated by OpenCVE AI on September 7, 2026 at 13:39 UTC.

Remediation

Vendor Workaround

Until a patched dashboard image is available, disable or remove the NVIDIA NIM integration so the NIM Account CR and associated Secrets are not present. Restrict OpenShift AI dashboard access to trusted administrators if NIM credentials must remain configured.

OpenCVE Recommended Actions

  • Disabling or removing the NVIDIA NIM integration until a patched dashboard image is released to eliminate the exposed secrets.
  • Restrict dashboard access to trusted administrators so that only privileged users can authenticate to the API.
  • Apply the vendor patch for the odh-dashboard component as soon as it becomes available to add proper authorization checks to the secret‑reading route.

Generated by OpenCVE AI on September 7, 2026 at 13:39 UTC.

Tracking

Sign in to view the affected projects.

Advisories

No advisories yet.

History

Tue, 08 Sep 2026 20:30:00 +0000

Type Values Removed Values Added
Metrics ssvc

{'options': {'Automatable': 'no', 'Exploitation': 'none', 'Technical Impact': 'partial'}, 'version': '2.0.3'}

Mon, 07 Sep 2026 18:45:00 +0000

Type Values Removed Values Added
First Time appeared Red Hat
Red Hat red Hat Openshift Ai (rhoai)
Vendors & Products Red Hat
Red Hat red Hat Openshift Ai (rhoai)

Mon, 07 Sep 2026 12:15:00 +0000

Type Values Removed Values Added
References
Metrics threat_severity

None

 threat_severity

Moderate

Mon, 07 Sep 2026 09:00:00 +0000

Type Values Removed Values Added
Description A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).
Title Odh-dashboard: odh-dashboard: nim credential secret readable by any authenticated user
First Time appeared Redhat
Redhat openshift Ai
Weaknesses CWE-862
CPEs cpe:/a:redhat:openshift_ai
Vendors & Products Redhat
Redhat openshift Ai
References
Metrics cvssV3_1

{'score': 6.5, 'vector': 'CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N'}

Subscriptions

Red Hat Red Hat Openshift Ai (rhoai)
Redhat Openshift Ai
cve-icon MITRE

Status: PUBLISHED

Assigner: redhat

Published:

Updated: 2026-09-08T16:55:49.270Z

Reserved: 2026-09-07T07:45:39.943Z

Link: CVE-2026-86332

cve-icon Vulnrichment

Updated: 2026-09-08T16:37:16.120Z

cve-icon NVD

Status : Awaiting Analysis

Published: 2026-09-07T09:17:17.807

Modified: 2026-09-08T19:08:15.590

Link: CVE-2026-86332

cve-icon Redhat

Severity : Moderate

Publid Date: 2026-09-07T07:07:25Z

Links: CVE-2026-86332 - Bugzilla

cve-icon OpenCVE Enrichment

Updated: 2026-09-07T18:30:03Z

Weaknesses