CVE-2026-69148
HIGH 7.1 ALL-YEARSMLflow is an open source AI engineering platform for agents, large language models, and machine learning models. Prior to 3.15.0, CreateModelVersion accepts a run_id or model_id after _validate_source_run() or _validate_source_model() in mlflow/server/handlers.py verifies only path containment, allowing authenticated users to create a model version that references another user's artifact directory and read files through GET /model-versions/get-artifact without the required READ permission. This issue is fixed in version 3.15.0.
Severe if exploited (CVSS 7.1), but no confirmed exploitation. Patch on a normal cadence.
Exploitation likelihood
0.4%chance of exploitation in 30 days · 30th percentile
Impact if exploited
7.1CVSS 3.1 · HIGH · CNA
- ConfidentialityHigh
- IntegrityLow
- AvailabilityNone
What an attacker needs
- ✓Access: Reachable over the network — no local access needed
- ⚠Privileges: Requires a low-privilege account
- ✓User interaction: No user interaction needed
- ✓Complexity: No special conditions — reliably repeatable
✓ lowers the bar for an attacker · ⚠ raises it
Proof of concept
No public PoC is currently catalogued.
Search for new PoCs
Search GitHub now — results may be empty or unverified.
Tracked sources are checked weekly for the full archive, including PoCs published after the original disclosure. A later release appears after a tracked source lists it and a refresh succeeds.
Data snapshot:
Weakness (CWE)
- CWE-862: : Missing Authorization
CVSS vector
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
References and research data (JSON)
Packages and version ranges
Each advisory describes its own package and affected ranges. A boundary applies to that range; it is not a universal upgrade recommendation.
mlflow npm
pkg:npm/mlflow
SEMVER range- All earlier versions (introduced 0)
- Fixed boundary (excluded): 3.15.0
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw · Updated 2026-08-21T09:25:54.585206030ZAdditional upstream package constraints
{ "database": { "source": "https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-gqch-g4w5-7qcw/GHSA-gqch-g4w5-7qcw.json" } }
Vendor product assessments
Showing 32 of 325 vendor product statements; 293 omitted. Read the full vendor advisory.
registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:13cd0a002e072d5b4eb3bd96d8bf8c4efc4363ea164d4d394bbfb0a8da6d3e97_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256%3A13cd0a002e072d5b4eb3bd96d8bf8c4efc4363ea164d4d394bbfb0a8da6d3e97?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9&tag=1791829804
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:36008673959c261938748d8983fbcec92eea1f29cbf20f94fea33cde00be06cd_ppc64le as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256%3A36008673959c261938748d8983fbcec92eea1f29cbf20f94fea33cde00be06cd?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9&tag=1791829804
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:c1f69a81b6498942d94a689c162b262c1b304e4a62bdd8139600a2f86ec7901a_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256%3Ac1f69a81b6498942d94a689c162b262c1b304e4a62bdd8139600a2f86ec7901a?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9&tag=1791829182
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:992b4a099bc21bdf1e7f12173cf1d4939f19a739efaad905bb3c9802323cdb47_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256%3A992b4a099bc21bdf1e7f12173cf1d4939f19a739efaad905bb3c9802323cdb47?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9&tag=1791828837
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9@sha256:fe0a7f1858a17adc97628febc77e7d0b48090286f7cfc5aeb005f5318c3684f3_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9@sha256%3Afe0a7f1858a17adc97628febc77e7d0b48090286f7cfc5aeb005f5318c3684f3?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9&tag=1791868241
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9@sha256:8671dda0773830f32fae3f8cb5f76475a2899a9c085f555ee5a2832eaebe4edb_arm64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-th06-cpu-torch210-py312-rhel9@sha256%3A8671dda0773830f32fae3f8cb5f76475a2899a9c085f555ee5a2832eaebe4edb?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9&tag=1791874335
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9@sha256:c845bf2647c5f9534b5f8606fdfc5daf6e0d3c96970be6def285d1a1dd38386f_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-th06-cuda130-torch210-py312-rhel9@sha256%3Ac845bf2647c5f9534b5f8606fdfc5daf6e0d3c96970be6def285d1a1dd38386f?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9&tag=1791961113
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:4fb155588956974c41605a8bcdb8bb9ab1d8f3531fd65b8577f6e1f47558d5c7_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-training-cuda128-torch29-py312-rhel9@sha256%3A4fb155588956974c41605a8bcdb8bb9ab1d8f3531fd65b8577f6e1f47558d5c7?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9&tag=1791786619
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:5489d7c1a785c943d732efbcd0d678dc534543744972458acc5643fdc8a2ceb4_arm64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256%3A5489d7c1a785c943d732efbcd0d678dc534543744972458acc5643fdc8a2ceb4?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9&tag=1791788267
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:8e50b8dc861206a619c160913a67605108f281fec41d27fba92357b714ac2b15_arm64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3A8e50b8dc861206a619c160913a67605108f281fec41d27fba92357b714ac2b15?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9&tag=1791872084
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:c2f3c2b2a5c768b1123eb6e16d95aa6c175894ef51cb0d413fcacc3a5a075ca5_s390x as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3Ac2f3c2b2a5c768b1123eb6e16d95aa6c175894ef51cb0d413fcacc3a5a075ca5?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9&tag=1791872084
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256:642e7ed4ce8ca243323e10a22fddfa67564434fa88ef2b05450b32f82db819c5_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256%3A642e7ed4ce8ca243323e10a22fddfa67564434fa88ef2b05450b32f82db819c5?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9&tag=1791829615
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:533e4f036091b30abc5d64d28ef569eb9d205aafd693c1524390450e4f82d105_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256%3A533e4f036091b30abc5d64d28ef569eb9d205aafd693c1524390450e4f82d105?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9&tag=1791868194
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9@sha256:97549e03a960290e96e7a65ffe4b61557fa41aaef5627e883a6b01248df41263_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9@sha256%3A97549e03a960290e96e7a65ffe4b61557fa41aaef5627e883a6b01248df41263?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9&tag=1791868238
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:0cee03f8bb48b0dbf217836a2859490575820fdcfccf60573b80dd742932de6e_arm64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256%3A0cee03f8bb48b0dbf217836a2859490575820fdcfccf60573b80dd742932de6e?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9&tag=1791829530
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:68f8aa91515094740f31cc42dac996a0089cc67a7b50a41daabe0d1c29919e16_amd64 as a component of Red Hat OpenShift AI 3.4 · fixed
Vendor assessment for this product only.
pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256%3A68f8aa91515094740f31cc42dac996a0089cc67a7b50a41daabe0d1c29919e16?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9&tag=1791829530
- vendor fix: For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Vendor guidance
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known affected
Vendor assessment for this product only.
pkg:oci/odh-mlflow-rhel9?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9
- workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.
- none available: Affected
registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:1edfd89a924a83901845cd773012a3aeca70c09a2175a87e83351140efc80485_ppc64le as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-ai-gateway-payload-processing-rhel9@sha256%3A1edfd89a924a83901845cd773012a3aeca70c09a2175a87e83351140efc80485?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9&tag=1791860396
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f6800c291162d9aac66fbfc8e60ef557a5bde639875c0799ffa617042460796c_arm64 as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-dashboard-rhel9@sha256%3Af6800c291162d9aac66fbfc8e60ef557a5bde639875c0799ffa617042460796c?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-dashboard-rhel9&tag=1791861020
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:74e688a9a5c378e54b5d8cec0b16b56af7c2a693a0bc24091966d00989af9f04_s390x as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-fms-guardrails-orchestrator-rhel9@sha256%3A74e688a9a5c378e54b5d8cec0b16b56af7c2a693a0bc24091966d00989af9f04?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9&tag=1791862392
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:526196c1815fb5d3e19bdc5ba7057cd9f8f5f4812f4fec40b5b49f8ddd81a04e_ppc64le as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-kserve-controller-rhel9@sha256%3A526196c1815fb5d3e19bdc5ba7057cd9f8f5f4812f4fec40b5b49f8ddd81a04e?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9&tag=1791468368
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:5eb78cd78c3f3c2f5502363b99f8f7605d05862bb9254a54301bf0fbc85b59fb_arm64 as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-kuberay-operator-controller-rhel9@sha256%3A5eb78cd78c3f3c2f5502363b99f8f7605d05862bb9254a54301bf0fbc85b59fb?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9&tag=1791864835
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9@sha256:7d9459149b6d4ec92ec5f9af07ee1a6ad2a5a651af4b2badaac2e5bb123ca989_s390x as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-llm-d-inference-scheduler-rhel9@sha256%3A7d9459149b6d4ec92ec5f9af07ee1a6ad2a5a651af4b2badaac2e5bb123ca989?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9&tag=1790958114
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:2f514dd5793d25ecd3400f68ce39da052b4a98a9ab07a2f43c461cb581c1221b_amd64 as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-ml-pipelines-driver-rhel9@sha256%3A2f514dd5793d25ecd3400f68ce39da052b4a98a9ab07a2f43c461cb581c1221b?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9&tag=1791865648
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:81527bc49736c347f26dd85830633d25130ec0bef2c20c1d80b8698a26a13d25_arm64 as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-mlmd-grpc-server-rhel9@sha256%3A81527bc49736c347f26dd85830633d25130ec0bef2c20c1d80b8698a26a13d25?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9&tag=1791865241
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:34954fc242ca5a0d736d90f8cba4d4383f41058a966717cfdc25d378cf92c064_amd64 as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-mod-arch-maas-rhel9@sha256%3A34954fc242ca5a0d736d90f8cba4d4383f41058a966717cfdc25d378cf92c064?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9&tag=1791860708
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-model-performance-data-rhel9@sha256:adaf85e49d307ec6b93a4126d5ca57ce3e505b38756f618bb7b0edf44b60b075_s390x as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-model-performance-data-rhel9@sha256%3Aadaf85e49d307ec6b93a4126d5ca57ce3e505b38756f618bb7b0edf44b60b075?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-model-performance-data-rhel9&tag=1790958081
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-must-gather-rhel9@sha256:d02eb26ad856076654eb517deab78aa8a5705bdfdcacc3920742748f2ff53bac_s390x as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-must-gather-rhel9@sha256%3Ad02eb26ad856076654eb517deab78aa8a5705bdfdcacc3920742748f2ff53bac?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-must-gather-rhel9&tag=1791351741
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-rhel9-operator@sha256:c90cd99c5412fb92e3b82d06c404484d162067f08d549d3c4671bed3a563e679_arm64 as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-rhel9-operator@sha256%3Ac90cd99c5412fb92e3b82d06c404484d162067f08d549d3c4671bed3a563e679?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1792040238
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:302761350081ac8fb0eff0790b325f55705817eb0a7adc4a14e71560df2b0e83_arm64 as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-training-operator-rhel9@sha256%3A302761350081ac8fb0eff0790b325f55705817eb0a7adc4a14e71560df2b0e83?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-training-operator-rhel9&tag=1791870503
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:da18c30446109340bb90f875a62cd4526ff6747b2dca3ef1d985dc76c3213914_amd64 as a component of Red Hat OpenShift AI 3.4 · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not present
pkg:oci/odh-trustyai-service-rhel9@sha256%3Ada18c30446109340bb90f875a62cd4526ff6747b2dca3ef1d985dc76c3213914?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-trustyai-service-rhel9&tag=1791792525
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00rhoai/odh-th-torch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · known not affected
Vendor assessment for this product only.
Reason: vulnerable code not in execute path
pkg:oci/odh-th-torch-rocm-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-rocm-py312-rhel9
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00
All CVSS metrics
- HIGH 7.1 v3.1 · CNA Primary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N - HIGH 7.1 v3.1 · NVD Secondary
CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:L/A:N
References
Exploit-tagged references (not proof of a PoC)
- https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw CVE record · GitHub_M · Updated 2026-08-17T21:21:10.279Z
CVE record · CISA-ADP · Updated 2026-08-18T13:15:58.164Z
NVD · CVE-2026-69148 · Updated 2026-09-18T20:05:53.723
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw · Updated 2026-08-21T09:25:54.585206030Z
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00
Advisories
- https://osv.dev/vulnerability/GHSA-gqch-g4w5-7qcw GitHub Advisory Database · GHSA-gqch-g4w5-7qcw
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw · Updated 2026-08-21T09:25:54.585206030Z - https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00
- https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-60474 EUVD · EUVD-2026-60474
Technical & other
- https://github.com/mlflow/mlflow/pull/24293 CVE record · GitHub_M · Updated 2026-08-17T21:21:10.279Z
NVD · CVE-2026-69148 · Updated 2026-09-18T20:05:53.723
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw · Updated 2026-08-21T09:25:54.585206030Z
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00 - https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be CVE record · GitHub_M · Updated 2026-08-17T21:21:10.279Z
NVD · CVE-2026-69148 · Updated 2026-09-18T20:05:53.723
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw · Updated 2026-08-21T09:25:54.585206030Z
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00 - https://github.com/mlflow/mlflow/releases/tag/v3.15.0 CVE record · GitHub_M · Updated 2026-08-17T21:21:10.279Z
NVD · CVE-2026-69148 · Updated 2026-09-18T20:05:53.723
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw · Updated 2026-08-21T09:25:54.585206030Z
Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00 - https://github.com/mlflow/mlflow GitHub Advisory Database · GHSA-gqch-g4w5-7qcw
GitHub Advisory Database · GHSA-gqch-g4w5-7qcw · Updated 2026-08-21T09:25:54.585206030Z - https://access.redhat.com/security/cve/CVE-2026-69148 Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00
- https://bugzilla.redhat.com/show_bug.cgi?id=2517654 Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00
- https://www.cve.org/CVERecord?id=CVE-2026-69148 Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00
- https://nvd.nist.gov/vuln/detail/CVE-2026-69148 Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00
- https://access.redhat.com/errata/RHSA-2026:84734 Red Hat · CVE-2026-69148 · Updated 2026-10-19T11:25:56+00:00
Sources: NVD · CVE.org · All sources and attribution · EPSS