{"schema":"vulnpedia.research/1","cve":"CVE-2026-105922","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://vuldb.com/vuln/413896","tags":["vdb-entry","technical-description","Third Party Advisory","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","url":"https://vuldb.com/vuln/413896"},{"source":"nvd","sourceId":"CVE-2026-105922","modified":"2026-10-09T14:13:02.383","url":"https://vuldb.com/vuln/413896"},{"source":"pysec","sourceId":"PYSEC-2026-4319","url":"https://vuldb.com/vuln/413896"},{"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","url":"https://vuldb.com/vuln/413896"},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://vuldb.com/vuln/413896"}]},{"url":"https://vuldb.com/vuln/413896/cti","tags":["signature","permissions-required","Permissions Required","REPORT","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","url":"https://vuldb.com/vuln/413896/cti"},{"source":"nvd","sourceId":"CVE-2026-105922","modified":"2026-10-09T14:13:02.383","url":"https://vuldb.com/vuln/413896/cti"},{"source":"pysec","sourceId":"PYSEC-2026-4319","url":"https://vuldb.com/vuln/413896/cti"},{"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","url":"https://vuldb.com/vuln/413896/cti"},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://vuldb.com/vuln/413896/cti"}]},{"url":"https://vuldb.com/cve/CVE-2026-105922","tags":["third-party-advisory","Third Party Advisory","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","url":"https://vuldb.com/cve/CVE-2026-105922"},{"source":"nvd","sourceId":"CVE-2026-105922","modified":"2026-10-09T14:13:02.383","url":"https://vuldb.com/cve/CVE-2026-105922"},{"source":"pysec","sourceId":"PYSEC-2026-4319","url":"https://vuldb.com/cve/CVE-2026-105922"},{"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","url":"https://vuldb.com/cve/CVE-2026-105922"},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://vuldb.com/cve/CVE-2026-105922"}]},{"url":"https://vuldb.com/submit/992707","tags":["third-party-advisory","Third Party Advisory","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","url":"https://vuldb.com/submit/992707"},{"source":"nvd","sourceId":"CVE-2026-105922","modified":"2026-10-09T14:13:02.383","url":"https://vuldb.com/submit/992707"},{"source":"pysec","sourceId":"PYSEC-2026-4319","url":"https://vuldb.com/submit/992707"},{"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","url":"https://vuldb.com/submit/992707"},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://vuldb.com/submit/992707"}]},{"url":"https://github.com/vllm-project/vllm/issues/57719","tags":["issue-tracking","Issue Tracking","REPORT","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","url":"https://github.com/vllm-project/vllm/issues/57719"},{"source":"nvd","sourceId":"CVE-2026-105922","modified":"2026-10-09T14:13:02.383","url":"https://github.com/vllm-project/vllm/issues/57719"},{"source":"pysec","sourceId":"PYSEC-2026-4319","url":"https://github.com/vllm-project/vllm/issues/57719"},{"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","url":"https://github.com/vllm-project/vllm/issues/57719"},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://github.com/vllm-project/vllm/issues/57719"}]},{"url":"https://gist.github.com/Yunzez/5c70a3bb328eaf6d646b9d31e879dc4a#file-repro_prompt_embeds_penalties_engine_crash-py","tags":["exploit","Third Party Advisory","ADVISORY","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","url":"https://gist.github.com/Yunzez/5c70a3bb328eaf6d646b9d31e879dc4a#file-repro_prompt_embeds_penalties_engine_crash-py"},{"source":"nvd","sourceId":"CVE-2026-105922","modified":"2026-10-09T14:13:02.383","url":"https://gist.github.com/Yunzez/5c70a3bb328eaf6d646b9d31e879dc4a#file-repro_prompt_embeds_penalties_engine_crash-py"},{"source":"pysec","sourceId":"PYSEC-2026-4319","url":"https://gist.github.com/Yunzez/5c70a3bb328eaf6d646b9d31e879dc4a#file-repro_prompt_embeds_penalties_engine_crash-py"},{"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","url":"https://gist.github.com/Yunzez/5c70a3bb328eaf6d646b9d31e879dc4a#file-repro_prompt_embeds_penalties_engine_crash-py"},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://gist.github.com/Yunzez/5c70a3bb328eaf6d646b9d31e879dc4a#file-repro_prompt_embeds_penalties_engine_crash-py"}]},{"url":"https://github.com/vllm-project/vllm/","tags":["product","Product","WEB","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-10-06T14:45:15.075Z","url":"https://github.com/vllm-project/vllm/"},{"source":"nvd","sourceId":"CVE-2026-105922","modified":"2026-10-09T14:13:02.383","url":"https://github.com/vllm-project/vllm/"},{"source":"pysec","sourceId":"PYSEC-2026-4319","url":"https://github.com/vllm-project/vllm/"},{"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","url":"https://github.com/vllm-project/vllm/"},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://github.com/vllm-project/vllm/"}]},{"url":"https://osv.dev/vulnerability/PYSEC-2026-4319","tags":["ADVISORY"],"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4319","url":"https://osv.dev/vulnerability/PYSEC-2026-4319"},{"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4319"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-105922","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-105922"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546627","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2546627"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-105922","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-105922"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105922","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-105922"}]},{"source":"euvd","sourceId":"EUVD-2026-93430","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93430","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-93430","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-93430"}]}],"packages":[{"source":"pysec","sourceId":"PYSEC-2026-4319","url":"https://osv.dev/vulnerability/PYSEC-2026-4319","ecosystem":"PyPI","name":"vllm","purl":"pkg:pypi/vllm","ranges":[{"type":"ECOSYSTEM","events":[{"introduced":"0"},{"fixed":"0.32.0"}]}],"versions":["0.0.1","0.1.0","0.1.1","0.1.2","0.1.3","0.1.4","0.1.5","0.1.6","0.1.7","0.10.0","0.10.1","0.10.1.1","0.10.2","0.11.0","0.11.1","0.11.2","0.12.0","0.13.0","0.14.0","0.14.1","0.15.0","0.15.1","0.16.0","0.17.0","0.17.1","0.18.0","0.18.1","0.19.0","0.19.1","0.2.0","0.2.1","0.2.1.post1","0.2.2","0.2.3","0.2.4","0.2.5","0.2.6","0.2.7","0.20.0","0.20.1","0.20.2","0.21.0","0.22.0","0.22.1","0.23.0","0.24.0","0.25.0","0.25.1","0.26.0","0.27.0","0.27.1","0.28.0","0.29.0","0.3.0","0.3.1","0.3.2","0.3.3","0.30.0","0.31.0","0.4.0","0.4.0.post1","0.4.1","0.4.2","0.4.3","0.5.0","0.5.0.post1","0.5.1","0.5.2","0.5.3","0.5.3.post1","0.5.4","0.5.5","0.6.0","0.6.1","0.6.1.post1","0.6.1.post2","0.6.2","0.6.3","0.6.3.post1","0.6.4","0.6.4.post1","0.6.5","0.6.6","0.6.6.post1","0.7.0","0.7.1","0.7.2","0.7.3","0.8.0","0.8.1","0.8.2","0.8.3","0.8.4","0.8.5","0.8.5.post1","0.9.0","0.9.0.1","0.9.1","0.9.2"],"ecosystemSpecific":{},"databaseSpecific":{"source":"https://github.com/pypa/advisory-database/blob/main/vulns/vllm/PYSEC-2026-4319.yaml"},"modified":"2026-10-18T13:45:02.439769873Z","origins":[{"source":"pysec","sourceId":"PYSEC-2026-4319","modified":"2026-10-18T13:45:02.439769873Z","url":"https://osv.dev/vulnerability/PYSEC-2026-4319"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","product":"rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cpu-rhel9@sha256:81c5994dc20321f8bd3969099eade78ef127cbd79f2d0ccea101c773e4c7fa4d?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cuda-rhel9","product":"rhaii/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cuda-rhel9@sha256:0d22e2301ce26ef68effda5d3a4a20381ad0ea34d1240e159e245bd44c2e125b?repository_url=registry.redhat.io/rhaii/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaii/vllm-gaudi-rhel9","product":"rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-gaudi-rhel9@sha256:ce1e4fd82dd37d299ce8c64a237971d00faf602f06868c986e81aefa04c283ef?repository_url=registry.redhat.io/rhaii/vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaii/vllm-neuron-rhel9","product":"rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-neuron-rhel9@sha256:1079c9afecdbc33f4790792f0d712dbf7523790a92dcfbe8fb5cf4c2d282fc5b?repository_url=registry.redhat.io/rhaii/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaii/vllm-rocm-rhel9","product":"rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-rocm-rhel9@sha256:1a30359d6ca5d0891e403b9b0a23c0ae1ad6e30a2429b9b42e246b874fe8859a?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaii/vllm-spyre-rhel9","product":"rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-spyre-rhel9@sha256:11ad6e13c41728944d933c7abe01d1d10ecb3f8e8b4f0da50ec53b7df6f036a8?repository_url=registry.redhat.io/rhaii/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaii/vllm-tpu-rhel9","product":"rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-tpu-rhel9@sha256:0c2ac747d67dc0e80162ff05867dd702e474b2217659f19f28b8e3a0c03a942a?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cuda-rhel9","product":"rhaiis/vllm-cuda-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cuda-rhel9@sha256:73bbc4560132c4aaa9bbd608ce9560eeae7b30bcc8f014da460afa5622139372?repository_url=registry.redhat.io/rhaiis/vllm-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-rocm-rhel9","product":"rhaiis/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-rocm-rhel9@sha256:37b64a8df90756aae0ee96d2f07765adbce5ed5beb2414ac3845806ad2219cfc?repository_url=registry.redhat.io/rhaiis/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-spyre-rhel9","product":"rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-spyre-rhel9@sha256:3dd7eff1c62cd4609b4c76590b77bb801cd064e40642ed32b5aa900a6bc643ea?repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-tpu-rhel9","product":"rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-tpu-rhel9@sha256:b1c12112a1e8a298645e10d34d44c9961a6121aa8d87fc5d65ad83e1ffa3c586?repository_url=registry.redhat.io/rhaiis/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","product":"rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-aws-cuda-rhel9@sha256:06b1e9b7df858121b6f339a5e78de93307be96c191a1c3e6df50cfeffaf9df15?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-cuda-rhel9","product":"rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-azure-cuda-rhel9@sha256:698d9e34aaf479d0149ea75b841dacbe0117ba2e3718a7088ac98ea6b081792e?repository_url=registry.redhat.io/rhelai3/bootc-azure-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-rocm-rhel9","product":"rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-azure-rocm-rhel9@sha256:87723c21f48eb371968e2d68346953f2a03a3cf643a967801b84696ee3e1f1e8?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-cuda-rhel9","product":"rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-cuda-rhel9@sha256:e0fbb896811ab54d183e23612030072b946674824bad697bf2b3f68362651662?repository_url=registry.redhat.io/rhelai3/bootc-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/bootc-gaudi-rhel9@sha256:e1057b59ca1be9501332abf97230855e85c7df858356be0da9dce230ea7e98e1?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","product":"rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-gcp-cuda-rhel9@sha256:c1a193fa047eedbbf52be0b1d0f5d52e3e572d144a871f7c9322a34ba5abd92f?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-rocm-rhel9","product":"rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-rocm-rhel9@sha256:8fe5203e86917e5f829bd64b831cad31536d23a213b4bfe31e652577ad0faf2e?repository_url=registry.redhat.io/rhelai3/bootc-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-agent-rhel9","product":"rhoai/odh-kserve-agent-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-agent-rhel9@sha256:cb2396d837f6249c85d55e118b61729e6c59cfb5a2bd45a0cf31867cb3f00cfc?repository_url=registry.redhat.io/rhoai/odh-kserve-agent-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-controller-rhel9","product":"rhoai/odh-kserve-controller-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-controller-rhel9@sha256:344c4225761bc681101b7597088f7c23d43cac7ca09c24edb1f1c38e4b493059?repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-router-rhel9","product":"rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-router-rhel9@sha256:03c98651276c00e36133c1926d90738940703cd12b2d47e5a3aa865e4c1872af?repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-storage-initializer-rhel9","product":"rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256:48619d144fdf453a2ed670694d732ac71f7a3df00951dbdf62ee41a084f646cd?repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-llm-d-kv-cache-rhel9","product":"rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-llm-d-kv-cache-rhel9@sha256:cb5eedeefd2578cd9bd8637250bbe299c84539f57b4ead75d630ed9f833a6ef2?repository_url=registry.redhat.io/rhoai/odh-llm-d-kv-cache-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Restrict network reachability of the vLLM inference service to authorized networks or localhost to prevent untrusted callers from submitting malicious queries.\n\nOn standalone host environments, restrict access to the inference port (default 8000/tcp) using firewalld:\n\nfirewall-cmd --permanent --add-rich-rule='rule family=\"ipv4\" source address=\"<trusted_network>\" port port=\"8000\" protocol=\"tcp\" accept'\nfirewall-cmd --permanent --remove-port=8000/tcp\nfirewall-cmd --reload\n\nIn Red Hat OpenShift AI environments, configure NetworkPolicies to isolate the model-serving pods and restrict ingress traffic exclusively to trusted internal gateways or authorized namespaces.\n\nCaveats: Restricting endpoint reachability blocks external or unauthorized systems from interacting with served models.\n\nWarning: Executing `firewall-cmd --reload` reloads the active firewall configuration and may momentarily interrupt existing network connections."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/odh-vllm-gaudi-rhel9@sha256:87eec3862eb6ddef445f89dcf6fd89add7ef202ea7c563b1ee7347537fb3e250?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","product":"rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/vllm-cpu-rhel9@sha256:fb7791bbfea99e9f81529fe8cc1e7c834ca470585c27590e3d0a6834167cd436?repository_url=registry.redhat.io/rhaiis/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-neuron-rhel9","product":"rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/vllm-neuron-rhel9@sha256:8ba72cec5d79b1a751eb09774c81fd6181b43ec69a2e5116982661b34366874d?repository_url=registry.redhat.io/rhaiis/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]},{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","product":"rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_in_execute_path","purl":"pkg:oci/odh-th-torch-cuda-py312-rhel9@sha256:efd7b3607b699092c68359d20ef0d0043114191a097637667c0d2cf78fbea702?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-105922","modified":"2026-10-20T17:53:36+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-105922.json"}]}],"vendorCoverage":{"total":27,"shown":27,"omitted":0,"source":"redhat"}}