Vulnpedia
← All CVEs

CVE-2026-42271

HIGH 8.7 KNOWN EXPLOITED PoC CATALOGUED DETECTION TEMPLATE ALL-YEARS

Published 2026-05-08 · Last modified 2026-07-15 · GitHub_M · NVD: Analyzed

LiteLLM is a proxy server (AI Gateway) to call LLM APIs in OpenAI (or native) format. From version 1.74.2 to before version 1.83.7, two endpoints used to preview an MCP server before saving it — POST /mcp-rest/test/connection and POST /mcp-rest/test/tools/list — accepted a full server configuration in the request body, including the command, args, and env fields used by the stdio transport. When called with a stdio configuration, the endpoints attempted to connect, which spawned the supplied command as a subprocess on the proxy host with the privileges of the proxy process. The endpoints were gated only by a valid proxy API key, with no role check. Any authenticated user — including holders of low-privilege internal-user keys — could therefore run arbitrary commands on the host. This issue has been patched in version 1.83.7.

ACTIVELY EXPLOITED

Confirmed exploited in the wild — in CISA KEV since 2026-06-08. Patch or mitigate now.

Exploitation likelihood

91.4%chance of exploitation in 30 days · 100th percentile

● In CISA KEV (2026-06-08)● Catalogued PoC◆ SSVC: exploitation active, automatable no

Impact if exploited

8.7CVSS 4.0 · HIGH · CNA

  • ConfidentialityHigh
  • IntegrityHigh
  • AvailabilityHigh

What an attacker needs

  • ✓Access: Reachable over the network — no local access needed
  • ⚠Privileges: Requires a low-privilege account
  • ✓User interaction: No user interaction needed
  • ✓Complexity: No special conditions — reliably repeatable
  • ⚠Requirements: Specific conditions must be present

✓ lowers the bar for an attacker · ⚠ raises it

Proof of concept

Public PoC or exploit resources are catalogued below.

Listed by the named source; Vulnpedia has not tested these resources.

PoC data: JSON

Detection templates

Detection checks are listed separately from PoCs.

Resource commands

nuclei -id CVE-2026-42271 -u https://TARGETDetection template — review its checks and affected versions before use.
curl -s https://vulnpedia.com/cve/CVE-2026-42271/poc.jsonMachine-readable PoC index for this CVE (for automation).

Search for new PoCs

Search GitHub now — results may be empty or unverified.

Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.

Data snapshot:

Affected

Vendors Berriai Red Hat Litellm Redhat

Products Litellm Red Hat Openshift Ai 2.25 Red Hat Openshift Ai 3.3 Red Hat Openshift Ai 3.4 Exploit Intelligence Red Hat Ansible Automation Platform 2 Red Hat Openshift Ai (Rhoai) Openshift Ai

Weakness (CWE)

  • CWE-77: : Improper Neutralization of Special Elements used in a Command ('Command Injection')
  • CWE-78: : Improper Neutralization of Special Elements used in an OS Command ('OS Command Injection')

CVSS vector

CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N

References and research data (JSON)

Packages and version ranges

Each advisory describes its own package and affected ranges. A boundary applies to that range; it is not a universal upgrade recommendation.

  • litellm PyPI

    pkg:pypi/litellm

    ECOSYSTEM range
    • Introduced version (included): 1.74.2
    • Fixed boundary (excluded): 1.83.7
    107 explicitly listed affected versions

    1.74.12, 1.74.14, 1.74.15, 1.74.15.post1, 1.74.15.post2, 1.74.2, 1.74.3, 1.74.3.post1, 1.74.3rc1, 1.74.3rc2, 1.74.3rc3, 1.74.4, 1.74.4.dev1, 1.74.6, 1.74.7, 1.74.7.post1, 1.74.7.post2, 1.74.7rc1, 1.74.8, 1.74.8.dev2, 1.74.9, 1.74.9.dev1, 1.74.9.dev2, 1.74.9.post1, 1.74.9.post2, 1.75.0, 1.75.2, 1.75.3, 1.75.4, 1.75.5.post1, 1.75.5.post2, 1.75.6, 1.75.7, 1.75.8, 1.75.9, 1.76.0, 1.76.1, 1.76.2, 1.76.3, 1.77.0, 1.77.1, 1.77.2.post1, 1.77.3, 1.77.4, 1.77.4.dev1, 1.77.5, 1.77.7, 1.78.0, 1.78.0rc2, 1.78.2, 1.78.3, 1.78.4, 1.78.5, 1.78.6, 1.78.7, 1.79.0, 1.79.0.dev1, 1.79.0.dev2, 1.79.0.dev3, 1.79.1, 1.79.2, 1.79.3, 1.79.3.dev8, 1.80.0, 1.80.10, 1.80.11, 1.80.12, 1.80.13, 1.80.15, 1.80.16, 1.80.17, 1.80.5, 1.80.6, 1.80.7, 1.80.8, 1.80.9, 1.81.0, 1.81.1, 1.81.10, 1.81.11, 1.81.12, 1.81.13, 1.81.14, 1.81.15, 1.81.16, 1.81.3, 1.81.4, 1.81.5, 1.81.6, 1.81.7, 1.81.8, 1.81.9, 1.81.9.dev1, 1.82.0, 1.82.1, 1.82.2, 1.82.3, 1.82.4, 1.82.5, 1.82.6, 1.83.0, 1.83.1, 1.83.2, 1.83.3, 1.83.4, 1.83.5, 1.83.6

    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/04/GHSA-v4p8-mg3p-g94g/GHSA-v4p8-mg3p-g94g.json"
  }
}
    GitHub Advisory Database · GHSA-v4p8-mg3p-g94g · Updated 2026-09-10T03:51:03.195872876Z
  • litellm PyPI

    pkg:pypi/litellm

    ECOSYSTEM range
    • Introduced version (included): 1.74.2
    • Fixed boundary (excluded): 1.83.7
    107 explicitly listed affected versions

    1.74.12, 1.74.14, 1.74.15, 1.74.15.post1, 1.74.15.post2, 1.74.2, 1.74.3, 1.74.3.post1, 1.74.3rc1, 1.74.3rc2, 1.74.3rc3, 1.74.4, 1.74.4.dev1, 1.74.6, 1.74.7, 1.74.7.post1, 1.74.7.post2, 1.74.7rc1, 1.74.8, 1.74.8.dev2, 1.74.9, 1.74.9.dev1, 1.74.9.dev2, 1.74.9.post1, 1.74.9.post2, 1.75.0, 1.75.2, 1.75.3, 1.75.4, 1.75.5.post1, 1.75.5.post2, 1.75.6, 1.75.7, 1.75.8, 1.75.9, 1.76.0, 1.76.1, 1.76.2, 1.76.3, 1.77.0, 1.77.1, 1.77.2.post1, 1.77.3, 1.77.4, 1.77.4.dev1, 1.77.5, 1.77.7, 1.78.0, 1.78.0rc2, 1.78.2, 1.78.3, 1.78.4, 1.78.5, 1.78.6, 1.78.7, 1.79.0, 1.79.0.dev1, 1.79.0.dev2, 1.79.0.dev3, 1.79.1, 1.79.2, 1.79.3, 1.79.3.dev8, 1.80.0, 1.80.10, 1.80.11, 1.80.12, 1.80.13, 1.80.15, 1.80.16, 1.80.17, 1.80.5, 1.80.6, 1.80.7, 1.80.8, 1.80.9, 1.81.0, 1.81.1, 1.81.10, 1.81.11, 1.81.12, 1.81.13, 1.81.14, 1.81.15, 1.81.16, 1.81.3, 1.81.4, 1.81.5, 1.81.6, 1.81.7, 1.81.8, 1.81.9, 1.81.9.dev1, 1.82.0, 1.82.1, 1.82.2, 1.82.3, 1.82.4, 1.82.5, 1.82.6, 1.83.0, 1.83.1, 1.83.2, 1.83.3, 1.83.4, 1.83.5, 1.83.6

    Additional upstream package constraints
    {
  "database": {
    "source": "https://github.com/pypa/advisory-database/blob/main/vulns/litellm/PYSEC-2026-2599.yaml"
  }
}
    PyPA · PYSEC-2026-2599 · Updated 2026-07-13T16:32:04.086728418Z

Vendor product assessments

  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:59a4a3dc01e258bdd6aa463c8dbb34e14bd1a8357ef6ae3d4ea9e6c8ce062353_arm64 as a component of Red Hat OpenShift AI 2.25 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-llama-stack-core-rhel9@sha256%3A59a4a3dc01e258bdd6aa463c8dbb34e14bd1a8357ef6ae3d4ea9e6c8ce062353?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9&tag=1781826406

    • vendor fix: For Red Hat OpenShift AI 2.25.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:66cc80e961fe991b063dc51467fa901dce3fb2afc383afed1c596ec432363022_amd64 as a component of Red Hat OpenShift AI 2.25 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-llama-stack-core-rhel9@sha256%3A66cc80e961fe991b063dc51467fa901dce3fb2afc383afed1c596ec432363022?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9&tag=1781826406

    • vendor fix: For Red Hat OpenShift AI 2.25.8 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:b6ec1fac474c9ff596322446656add0ebb10c449d623c37a3f71548957dc4c9c_amd64 as a component of Red Hat OpenShift AI 3.3 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-llama-stack-core-rhel9@sha256%3Ab6ec1fac474c9ff596322446656add0ebb10c449d623c37a3f71548957dc4c9c?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9&tag=1782310008

    • vendor fix: For Red Hat OpenShift AI 3.3.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-llama-stack-core-rhel9@sha256:ee821288511aaf6e91080f8a925a425e5d26eeacc73f042b39469c65c2e7a139_arm64 as a component of Red Hat OpenShift AI 3.3 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-llama-stack-core-rhel9@sha256%3Aee821288511aaf6e91080f8a925a425e5d26eeacc73f042b39469c65c2e7a139?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-llama-stack-core-rhel9&tag=1782310008

    • vendor fix: For Red Hat OpenShift AI 3.3.4 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:1c962bba45e5cddaadd8ceff241417f9c3686aba1df8b6b511caf5a9901f2c40_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256%3A1c962bba45e5cddaadd8ceff241417f9c3686aba1df8b6b511caf5a9901f2c40?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9&tag=1781622627

    • vendor fix: For Red Hat OpenShift AI 3.4.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:1d6d4da4451688faa350b05558ed601e5c498b2382923f1bf45fc41958b098f6_s390x as a component of Red Hat OpenShift AI 3.4 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256%3A1d6d4da4451688faa350b05558ed601e5c498b2382923f1bf45fc41958b098f6?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9&tag=1781622627

    • vendor fix: For Red Hat OpenShift AI 3.4.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:305bf281a63bff13b96466fb7adfd0962ac28e92d649ad692a86eb10db89a1a0_arm64 as a component of Red Hat OpenShift AI 3.4 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256%3A305bf281a63bff13b96466fb7adfd0962ac28e92d649ad692a86eb10db89a1a0?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9&tag=1781622627

    • vendor fix: For Red Hat OpenShift AI 3.4.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:5149bc20e5d0a9e281ca3330d000d613b5987f46996e771067532af0fe3e0fb8_ppc64le as a component of Red Hat OpenShift AI 3.4 · fixed

    Vendor assessment for this product only.

    pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256%3A5149bc20e5d0a9e281ca3330d000d613b5987f46996e771067532af0fe3e0fb8?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9&tag=1781622627

    • vendor fix: For Red Hat OpenShift AI 3.4.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-operator-bundle@sha256:c0d7ed557a77e880b7d78eb3a87a05cadaf8711eea4e024fece782f5a68edebe_amd64 as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-operator-bundle@sha256%3Ac0d7ed557a77e880b7d78eb3a87a05cadaf8711eea4e024fece782f5a68edebe?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-operator-bundle&tag=1782131953

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:1fc8714e90d4b7a9ca8e6d9360f692fee9a764d6e556d5241886dbf116df8902_arm64 as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A1fc8714e90d4b7a9ca8e6d9360f692fee9a764d6e556d5241886dbf116df8902?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1782131177

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:227cecaf494ed3999aee9743b93371bd11eebce31538d34bea239133f473e3dd_s390x as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A227cecaf494ed3999aee9743b93371bd11eebce31538d34bea239133f473e3dd?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1782131177

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:5d74f4badc192e18e4cf8027a2091cf5148f1426e0542bc5d7a5ecaf6dd9cf87_ppc64le as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A5d74f4badc192e18e4cf8027a2091cf5148f1426e0542bc5d7a5ecaf6dd9cf87?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1782131177

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:a2362d90bb91fd360fdbfe760206da6a30024cca09b9839bdbfe0573a3e76ace_amd64 as a component of Red Hat OpenShift AI 2.25 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3Aa2362d90bb91fd360fdbfe760206da6a30024cca09b9839bdbfe0573a3e76ace?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1782131177

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-operator-bundle@sha256:163f636a1cbc151572ad0470bd5b06650980efd72e6c462cff6ce9ce4bcfaa93_amd64 as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-operator-bundle@sha256%3A163f636a1cbc151572ad0470bd5b06650980efd72e6c462cff6ce9ce4bcfaa93?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-operator-bundle&tag=1782332801

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:195a25181e1ff5c73cea1146a339489398cb54618e8cd9d574e90a72a1ff3e11_arm64 as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A195a25181e1ff5c73cea1146a339489398cb54618e8cd9d574e90a72a1ff3e11?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1782332088

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:48a73c9e0491f2f9bb109e15fea89ebd65939ed9bcfced506e006f23bbe9f64e_ppc64le as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A48a73c9e0491f2f9bb109e15fea89ebd65939ed9bcfced506e006f23bbe9f64e?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1782332088

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:5b0afdcb5c35d4c55847e1eb2967056ef9f508549f40028d6a6d2b41f6e70fe6_amd64 as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A5b0afdcb5c35d4c55847e1eb2967056ef9f508549f40028d6a6d2b41f6e70fe6?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1782332088

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:f7788f465a7f7d03b8ac7b1de0994e99eb95693f78120856420e7d2426a3c466_s390x as a component of Red Hat OpenShift AI 3.3 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3Af7788f465a7f7d03b8ac7b1de0994e99eb95693f78120856420e7d2426a3c466?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1782332088

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-operator-bundle@sha256:0efd1bb73b277b4cdca47bcb424679de6fd094d04e73e7a3ed0c470e8040b440_amd64 as a component of Red Hat OpenShift AI 3.4 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-operator-bundle@sha256%3A0efd1bb73b277b4cdca47bcb424679de6fd094d04e73e7a3ed0c470e8040b440?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-operator-bundle&tag=1781682120

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:4b8e9cda02c30b95aa6e483dd9f90b2e27b9093212c6c3d956be8da3dd00dd16_s390x as a component of Red Hat OpenShift AI 3.4 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A4b8e9cda02c30b95aa6e483dd9f90b2e27b9093212c6c3d956be8da3dd00dd16?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1781681524

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:72648350ddd7a3401542e90f923df38adb4ee75ded438dade1bc472566f474dc_ppc64le as a component of Red Hat OpenShift AI 3.4 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A72648350ddd7a3401542e90f923df38adb4ee75ded438dade1bc472566f474dc?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1781681524

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:76341c99cdb9a4321a37a58b1757ed0327bcf8d3adfa5688109f138a16b5ef04_amd64 as a component of Red Hat OpenShift AI 3.4 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3A76341c99cdb9a4321a37a58b1757ed0327bcf8d3adfa5688109f138a16b5ef04?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1781681524

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:cc6f060d37c92ea68c955e637e6291863272c1992ba86bc872989c4b566fc8bf_arm64 as a component of Red Hat OpenShift AI 3.4 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not present

    pkg:oci/odh-rhel9-operator@sha256%3Acc6f060d37c92ea68c955e637e6291863272c1992ba86bc872989c4b566fc8bf?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1781681524

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not in execute path

    pkg:oci/vulnerability-analysis-rhel9?repository_url=registry.redhat.io/exploit-intelligence-tech-preview/vulnerability-analysis-rhel9

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • ansible-automation-platform-26/lightspeed-chatbot-rhel9 as a component of Red Hat Ansible Automation Platform 2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not in execute path

    pkg:oci/lightspeed-chatbot-rhel9?repository_url=registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • ansible-automation-platform-27/lightspeed-chatbot-rhel9 as a component of Red Hat Ansible Automation Platform 2 · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not in execute path

    pkg:oci/lightspeed-chatbot-rhel9?repository_url=registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00
  • rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known not affected

    Vendor assessment for this product only.

    Reason: vulnerable code not in execute path

    pkg:oci/odh-mlflow-rhel9?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9

    Red Hat · CVE-2026-42271 · Updated 2026-10-09T16:01:43+00:00

Unverified PoC candidates

Catalogue matches for further research. These repositories have not been validated as working exploits.

2 candidates

Additional exploitation reports

Source-specific reports, separate from CISA KEV. Repeated observations from one source are not independent confirmations.

85 more source reports

Known Affected Software Configurations

VendorProductVersion range
LitellmLitellm≥ 1.74.2 and < 1.83.7
RedhatOpenshift Ai≥ 2.25 and < 2.25.8
RedhatOpenshift Ai≥ 3.3 and < 3.3.4
RedhatOpenshift Ai3.4

All CVSS metrics

  • HIGH 8.7 v4.0 · CNA Primary
    CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N
  • HIGH 8.8 v3.1 · ADP Primary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H
  • HIGH 8.7 v4.0 · NVD Secondary
    CVSS:4.0/AV:N/AC:L/AT:P/PR:L/UI:N/VC:H/VI:H/VA:H/SC:H/SI:N/SA:N/E:X/CR:X/IR:X/AR:X/MAV:X/MAC:X/MAT:X/MPR:X/MUI:X/MVC:X/MVI:X/MVA:X/MSC:X/MSI:X/MSA:X/S:X/AU:X/R:X/V:X/RE:X/U:X
  • HIGH 8.8 v3.1 · NVD Primary
    CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:H/A:H

References

Patches & mitigations

Advisories

Technical & other

Sources: NVD · CVE.org · All sources and attribution · EPSS