{"schema":"vulnpedia.research/1","cve":"CVE-2026-69148","references":[{"url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw","tags":["x_refsource_CONFIRM","exploit","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-08-17T21:21:10.279Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-08-17T21:21:10.279Z","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw"},{"source":"mitre","sourceId":"CISA-ADP","modified":"2026-08-18T13:15:58.164Z","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw"},{"source":"nvd","sourceId":"CVE-2026-69148","modified":"2026-09-18T20:05:53.723","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","modified":"2026-08-21T09:25:54.585206030Z","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw"},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://github.com/mlflow/mlflow/security/advisories/GHSA-gqch-g4w5-7qcw"}]},{"url":"https://github.com/mlflow/mlflow/pull/24293","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-08-17T21:21:10.279Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-08-17T21:21:10.279Z","url":"https://github.com/mlflow/mlflow/pull/24293"},{"source":"nvd","sourceId":"CVE-2026-69148","modified":"2026-09-18T20:05:53.723","url":"https://github.com/mlflow/mlflow/pull/24293"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","url":"https://github.com/mlflow/mlflow/pull/24293"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","modified":"2026-08-21T09:25:54.585206030Z","url":"https://github.com/mlflow/mlflow/pull/24293"},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://github.com/mlflow/mlflow/pull/24293"}]},{"url":"https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-08-17T21:21:10.279Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-08-17T21:21:10.279Z","url":"https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be"},{"source":"nvd","sourceId":"CVE-2026-69148","modified":"2026-09-18T20:05:53.723","url":"https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","url":"https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","modified":"2026-08-21T09:25:54.585206030Z","url":"https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be"},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://github.com/mlflow/mlflow/commit/4bb7474771c3be808cd9e129defef9305f2869be"}]},{"url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0","tags":["x_refsource_MISC","WEB","vendor-reference"],"source":"mitre","sourceId":"GitHub_M","modified":"2026-08-17T21:21:10.279Z","origins":[{"source":"mitre","sourceId":"GitHub_M","modified":"2026-08-17T21:21:10.279Z","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"},{"source":"nvd","sourceId":"CVE-2026-69148","modified":"2026-09-18T20:05:53.723","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","modified":"2026-08-21T09:25:54.585206030Z","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://github.com/mlflow/mlflow/releases/tag/v3.15.0"}]},{"url":"https://osv.dev/vulnerability/GHSA-gqch-g4w5-7qcw","tags":["ADVISORY"],"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","modified":"2026-08-21T09:25:54.585206030Z","origins":[{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","url":"https://osv.dev/vulnerability/GHSA-gqch-g4w5-7qcw"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","modified":"2026-08-21T09:25:54.585206030Z","url":"https://osv.dev/vulnerability/GHSA-gqch-g4w5-7qcw"}]},{"url":"https://github.com/mlflow/mlflow","tags":["PACKAGE"],"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","modified":"2026-08-21T09:25:54.585206030Z","origins":[{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","url":"https://github.com/mlflow/mlflow"},{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","modified":"2026-08-21T09:25:54.585206030Z","url":"https://github.com/mlflow/mlflow"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-69148","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-69148"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517654","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2517654"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-69148","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-69148"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69148","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-69148"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84734","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84734"}]},{"source":"euvd","sourceId":"EUVD-2026-60474","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-60474","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-60474","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-60474"}]}],"packages":[{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","url":"https://osv.dev/vulnerability/GHSA-gqch-g4w5-7qcw","ecosystem":"npm","name":"mlflow","purl":"pkg:npm/mlflow","ranges":[{"type":"SEMVER","events":[{"introduced":"0"},{"fixed":"3.15.0"}]}],"databaseSpecific":{"source":"https://github.com/github/advisory-database/blob/main/advisories/github-reviewed/2026/08/GHSA-gqch-g4w5-7qcw/GHSA-gqch-g4w5-7qcw.json"},"modified":"2026-08-21T09:25:54.585206030Z","origins":[{"source":"ghsa","sourceId":"GHSA-gqch-g4w5-7qcw","modified":"2026-08-21T09:25:54.585206030Z","url":"https://osv.dev/vulnerability/GHSA-gqch-g4w5-7qcw"}]}],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:13cd0a002e072d5b4eb3bd96d8bf8c4efc4363ea164d4d394bbfb0a8da6d3e97_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:13cd0a002e072d5b4eb3bd96d8bf8c4efc4363ea164d4d394bbfb0a8da6d3e97_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256%3A13cd0a002e072d5b4eb3bd96d8bf8c4efc4363ea164d4d394bbfb0a8da6d3e97?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9&tag=1791829804","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:36008673959c261938748d8983fbcec92eea1f29cbf20f94fea33cde00be06cd_ppc64le","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:36008673959c261938748d8983fbcec92eea1f29cbf20f94fea33cde00be06cd_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256%3A36008673959c261938748d8983fbcec92eea1f29cbf20f94fea33cde00be06cd?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9&tag=1791829804","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:c1f69a81b6498942d94a689c162b262c1b304e4a62bdd8139600a2f86ec7901a_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:c1f69a81b6498942d94a689c162b262c1b304e4a62bdd8139600a2f86ec7901a_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256%3Ac1f69a81b6498942d94a689c162b262c1b304e4a62bdd8139600a2f86ec7901a?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9&tag=1791829182","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:992b4a099bc21bdf1e7f12173cf1d4939f19a739efaad905bb3c9802323cdb47_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:992b4a099bc21bdf1e7f12173cf1d4939f19a739efaad905bb3c9802323cdb47_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256%3A992b4a099bc21bdf1e7f12173cf1d4939f19a739efaad905bb3c9802323cdb47?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9&tag=1791828837","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9@sha256:fe0a7f1858a17adc97628febc77e7d0b48090286f7cfc5aeb005f5318c3684f3_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9@sha256:fe0a7f1858a17adc97628febc77e7d0b48090286f7cfc5aeb005f5318c3684f3_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9@sha256%3Afe0a7f1858a17adc97628febc77e7d0b48090286f7cfc5aeb005f5318c3684f3?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-rocm-py312-rhel9&tag=1791868241","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9@sha256:8671dda0773830f32fae3f8cb5f76475a2899a9c085f555ee5a2832eaebe4edb_arm64","product":"registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9@sha256:8671dda0773830f32fae3f8cb5f76475a2899a9c085f555ee5a2832eaebe4edb_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-th06-cpu-torch210-py312-rhel9@sha256%3A8671dda0773830f32fae3f8cb5f76475a2899a9c085f555ee5a2832eaebe4edb?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-th06-cpu-torch210-py312-rhel9&tag=1791874335","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9@sha256:c845bf2647c5f9534b5f8606fdfc5daf6e0d3c96970be6def285d1a1dd38386f_amd64","product":"registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9@sha256:c845bf2647c5f9534b5f8606fdfc5daf6e0d3c96970be6def285d1a1dd38386f_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-th06-cuda130-torch210-py312-rhel9@sha256%3Ac845bf2647c5f9534b5f8606fdfc5daf6e0d3c96970be6def285d1a1dd38386f?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-th06-cuda130-torch210-py312-rhel9&tag=1791961113","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:4fb155588956974c41605a8bcdb8bb9ab1d8f3531fd65b8577f6e1f47558d5c7_amd64","product":"registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:4fb155588956974c41605a8bcdb8bb9ab1d8f3531fd65b8577f6e1f47558d5c7_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-training-cuda128-torch29-py312-rhel9@sha256%3A4fb155588956974c41605a8bcdb8bb9ab1d8f3531fd65b8577f6e1f47558d5c7?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9&tag=1791786619","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:5489d7c1a785c943d732efbcd0d678dc534543744972458acc5643fdc8a2ceb4_arm64","product":"registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:5489d7c1a785c943d732efbcd0d678dc534543744972458acc5643fdc8a2ceb4_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256%3A5489d7c1a785c943d732efbcd0d678dc534543744972458acc5643fdc8a2ceb4?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9&tag=1791788267","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:8e50b8dc861206a619c160913a67605108f281fec41d27fba92357b714ac2b15_arm64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:8e50b8dc861206a619c160913a67605108f281fec41d27fba92357b714ac2b15_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3A8e50b8dc861206a619c160913a67605108f281fec41d27fba92357b714ac2b15?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9&tag=1791872084","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:c2f3c2b2a5c768b1123eb6e16d95aa6c175894ef51cb0d413fcacc3a5a075ca5_s390x","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:c2f3c2b2a5c768b1123eb6e16d95aa6c175894ef51cb0d413fcacc3a5a075ca5_s390x as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3Ac2f3c2b2a5c768b1123eb6e16d95aa6c175894ef51cb0d413fcacc3a5a075ca5?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9&tag=1791872084","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256:642e7ed4ce8ca243323e10a22fddfa67564434fa88ef2b05450b32f82db819c5_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256:642e7ed4ce8ca243323e10a22fddfa67564434fa88ef2b05450b32f82db819c5_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-pytorch-cuda-py312-rhel9@sha256%3A642e7ed4ce8ca243323e10a22fddfa67564434fa88ef2b05450b32f82db819c5?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-cuda-py312-rhel9&tag=1791829615","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:533e4f036091b30abc5d64d28ef569eb9d205aafd693c1524390450e4f82d105_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256:533e4f036091b30abc5d64d28ef569eb9d205aafd693c1524390450e4f82d105_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-pytorch-rocm-py312-rhel9@sha256%3A533e4f036091b30abc5d64d28ef569eb9d205aafd693c1524390450e4f82d105?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9&tag=1791868194","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9@sha256:97549e03a960290e96e7a65ffe4b61557fa41aaef5627e883a6b01248df41263_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9@sha256:97549e03a960290e96e7a65ffe4b61557fa41aaef5627e883a6b01248df41263_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9@sha256%3A97549e03a960290e96e7a65ffe4b61557fa41aaef5627e883a6b01248df41263?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-tensorflow-rocm-py312-rhel9&tag=1791868238","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:0cee03f8bb48b0dbf217836a2859490575820fdcfccf60573b80dd742932de6e_arm64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:0cee03f8bb48b0dbf217836a2859490575820fdcfccf60573b80dd742932de6e_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256%3A0cee03f8bb48b0dbf217836a2859490575820fdcfccf60573b80dd742932de6e?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9&tag=1791829530","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:68f8aa91515094740f31cc42dac996a0089cc67a7b50a41daabe0d1c29919e16_amd64","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256:68f8aa91515094740f31cc42dac996a0089cc67a7b50a41daabe0d1c29919e16_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-workbench-jupyter-trustyai-cpu-py312-rhel9@sha256%3A68f8aa91515094740f31cc42dac996a0089cc67a7b50a41daabe0d1c29919e16?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9&tag=1791829530","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-mlflow-rhel9","product":"rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-mlflow-rhel9?repository_url=registry.redhat.io/rhoai/odh-mlflow-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:1edfd89a924a83901845cd773012a3aeca70c09a2175a87e83351140efc80485_ppc64le","product":"registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:1edfd89a924a83901845cd773012a3aeca70c09a2175a87e83351140efc80485_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ai-gateway-payload-processing-rhel9@sha256%3A1edfd89a924a83901845cd773012a3aeca70c09a2175a87e83351140efc80485?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9&tag=1791860396","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f6800c291162d9aac66fbfc8e60ef557a5bde639875c0799ffa617042460796c_arm64","product":"registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:f6800c291162d9aac66fbfc8e60ef557a5bde639875c0799ffa617042460796c_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-dashboard-rhel9@sha256%3Af6800c291162d9aac66fbfc8e60ef557a5bde639875c0799ffa617042460796c?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-dashboard-rhel9&tag=1791861020","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:74e688a9a5c378e54b5d8cec0b16b56af7c2a693a0bc24091966d00989af9f04_s390x","product":"registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:74e688a9a5c378e54b5d8cec0b16b56af7c2a693a0bc24091966d00989af9f04_s390x as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-fms-guardrails-orchestrator-rhel9@sha256%3A74e688a9a5c378e54b5d8cec0b16b56af7c2a693a0bc24091966d00989af9f04?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9&tag=1791862392","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:526196c1815fb5d3e19bdc5ba7057cd9f8f5f4812f4fec40b5b49f8ddd81a04e_ppc64le","product":"registry.redhat.io/rhoai/odh-kserve-controller-rhel9@sha256:526196c1815fb5d3e19bdc5ba7057cd9f8f5f4812f4fec40b5b49f8ddd81a04e_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kserve-controller-rhel9@sha256%3A526196c1815fb5d3e19bdc5ba7057cd9f8f5f4812f4fec40b5b49f8ddd81a04e?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-kserve-controller-rhel9&tag=1791468368","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:5eb78cd78c3f3c2f5502363b99f8f7605d05862bb9254a54301bf0fbc85b59fb_arm64","product":"registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9@sha256:5eb78cd78c3f3c2f5502363b99f8f7605d05862bb9254a54301bf0fbc85b59fb_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kuberay-operator-controller-rhel9@sha256%3A5eb78cd78c3f3c2f5502363b99f8f7605d05862bb9254a54301bf0fbc85b59fb?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-kuberay-operator-controller-rhel9&tag=1791864835","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9@sha256:7d9459149b6d4ec92ec5f9af07ee1a6ad2a5a651af4b2badaac2e5bb123ca989_s390x","product":"registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9@sha256:7d9459149b6d4ec92ec5f9af07ee1a6ad2a5a651af4b2badaac2e5bb123ca989_s390x as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-llm-d-inference-scheduler-rhel9@sha256%3A7d9459149b6d4ec92ec5f9af07ee1a6ad2a5a651af4b2badaac2e5bb123ca989?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9&tag=1790958114","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:2f514dd5793d25ecd3400f68ce39da052b4a98a9ab07a2f43c461cb581c1221b_amd64","product":"registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9@sha256:2f514dd5793d25ecd3400f68ce39da052b4a98a9ab07a2f43c461cb581c1221b_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ml-pipelines-driver-rhel9@sha256%3A2f514dd5793d25ecd3400f68ce39da052b4a98a9ab07a2f43c461cb581c1221b?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-driver-rhel9&tag=1791865648","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:81527bc49736c347f26dd85830633d25130ec0bef2c20c1d80b8698a26a13d25_arm64","product":"registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9@sha256:81527bc49736c347f26dd85830633d25130ec0bef2c20c1d80b8698a26a13d25_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mlmd-grpc-server-rhel9@sha256%3A81527bc49736c347f26dd85830633d25130ec0bef2c20c1d80b8698a26a13d25?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-mlmd-grpc-server-rhel9&tag=1791865241","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:34954fc242ca5a0d736d90f8cba4d4383f41058a966717cfdc25d378cf92c064_amd64","product":"registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9@sha256:34954fc242ca5a0d736d90f8cba4d4383f41058a966717cfdc25d378cf92c064_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mod-arch-maas-rhel9@sha256%3A34954fc242ca5a0d736d90f8cba4d4383f41058a966717cfdc25d378cf92c064?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-mod-arch-maas-rhel9&tag=1791860708","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-model-performance-data-rhel9@sha256:adaf85e49d307ec6b93a4126d5ca57ce3e505b38756f618bb7b0edf44b60b075_s390x","product":"registry.redhat.io/rhoai/odh-model-performance-data-rhel9@sha256:adaf85e49d307ec6b93a4126d5ca57ce3e505b38756f618bb7b0edf44b60b075_s390x as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-performance-data-rhel9@sha256%3Aadaf85e49d307ec6b93a4126d5ca57ce3e505b38756f618bb7b0edf44b60b075?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-model-performance-data-rhel9&tag=1790958081","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-must-gather-rhel9@sha256:d02eb26ad856076654eb517deab78aa8a5705bdfdcacc3920742748f2ff53bac_s390x","product":"registry.redhat.io/rhoai/odh-must-gather-rhel9@sha256:d02eb26ad856076654eb517deab78aa8a5705bdfdcacc3920742748f2ff53bac_s390x as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-must-gather-rhel9@sha256%3Ad02eb26ad856076654eb517deab78aa8a5705bdfdcacc3920742748f2ff53bac?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-must-gather-rhel9&tag=1791351741","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-rhel9-operator@sha256:c90cd99c5412fb92e3b82d06c404484d162067f08d549d3c4671bed3a563e679_arm64","product":"registry.redhat.io/rhoai/odh-rhel9-operator@sha256:c90cd99c5412fb92e3b82d06c404484d162067f08d549d3c4671bed3a563e679_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-rhel9-operator@sha256%3Ac90cd99c5412fb92e3b82d06c404484d162067f08d549d3c4671bed3a563e679?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-rhel9-operator&tag=1792040238","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:302761350081ac8fb0eff0790b325f55705817eb0a7adc4a14e71560df2b0e83_arm64","product":"registry.redhat.io/rhoai/odh-training-operator-rhel9@sha256:302761350081ac8fb0eff0790b325f55705817eb0a7adc4a14e71560df2b0e83_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-training-operator-rhel9@sha256%3A302761350081ac8fb0eff0790b325f55705817eb0a7adc4a14e71560df2b0e83?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-training-operator-rhel9&tag=1791870503","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:da18c30446109340bb90f875a62cd4526ff6747b2dca3ef1d985dc76c3213914_amd64","product":"registry.redhat.io/rhoai/odh-trustyai-service-rhel9@sha256:da18c30446109340bb90f875a62cd4526ff6747b2dca3ef1d985dc76c3213914_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-trustyai-service-rhel9@sha256%3Ada18c30446109340bb90f875a62cd4526ff6747b2dca3ef1d985dc76c3213914?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-trustyai-service-rhel9&tag=1791792525","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]},{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-rocm-py312-rhel9","product":"rhoai/odh-th-torch-rocm-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_in_execute_path","purl":"pkg:oci/odh-th-torch-rocm-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-rocm-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-69148","modified":"2026-10-19T11:25:56+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-69148.json"}]}],"vendorCoverage":{"total":325,"shown":32,"omitted":293,"source":"redhat"}}