{"schema":"vulnpedia.research/1","cve":"CVE-2026-92220","generated":"2026-10-26T13:52:32.101Z","references":[{"url":"https://vuldb.com/vuln/404470","tags":["vdb-entry","technical-description","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","url":"https://vuldb.com/vuln/404470"},{"source":"nvd","sourceId":"CVE-2026-92220","modified":"2026-09-16T20:17:47.403","url":"https://vuldb.com/vuln/404470"},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://vuldb.com/vuln/404470"}]},{"url":"https://vuldb.com/vuln/404470/cti","tags":["signature","permissions-required","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","url":"https://vuldb.com/vuln/404470/cti"},{"source":"nvd","sourceId":"CVE-2026-92220","modified":"2026-09-16T20:17:47.403","url":"https://vuldb.com/vuln/404470/cti"},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://vuldb.com/vuln/404470/cti"}]},{"url":"https://vuldb.com/cve/CVE-2026-92220","tags":["third-party-advisory","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","url":"https://vuldb.com/cve/CVE-2026-92220"},{"source":"nvd","sourceId":"CVE-2026-92220","modified":"2026-09-16T20:17:47.403","url":"https://vuldb.com/cve/CVE-2026-92220"},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://vuldb.com/cve/CVE-2026-92220"}]},{"url":"https://vuldb.com/submit/934149","tags":["third-party-advisory","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","url":"https://vuldb.com/submit/934149"},{"source":"nvd","sourceId":"CVE-2026-92220","modified":"2026-09-16T20:17:47.403","url":"https://vuldb.com/submit/934149"},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://vuldb.com/submit/934149"}]},{"url":"https://github.com/vllm-project/vllm/pull/50674","tags":["issue-tracking","patch","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","url":"https://github.com/vllm-project/vllm/pull/50674"},{"source":"nvd","sourceId":"CVE-2026-92220","modified":"2026-09-16T20:17:47.403","url":"https://github.com/vllm-project/vllm/pull/50674"},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://github.com/vllm-project/vllm/pull/50674"}]},{"url":"https://github.com/vllm-project/vllm/","tags":["product","vendor-reference"],"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","origins":[{"source":"mitre","sourceId":"VulDB","modified":"2026-09-16T02:15:10.740Z","url":"https://github.com/vllm-project/vllm/"},{"source":"nvd","sourceId":"CVE-2026-92220","modified":"2026-09-16T20:17:47.403","url":"https://github.com/vllm-project/vllm/"},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://github.com/vllm-project/vllm/"}]},{"url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","tags":["vendor-advisory"],"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"url":"https://access.redhat.com/security/cve/CVE-2026-92220","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://access.redhat.com/security/cve/CVE-2026-92220"}]},{"url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534981","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://bugzilla.redhat.com/show_bug.cgi?id=2534981"}]},{"url":"https://www.cve.org/CVERecord?id=CVE-2026-92220","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://www.cve.org/CVERecord?id=CVE-2026-92220"}]},{"url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92220","tags":["vendor-reference"],"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://nvd.nist.gov/vuln/detail/CVE-2026-92220"}]},{"url":"https://access.redhat.com/errata/RHSA-2026:84734","tags":["vendor-remediation"],"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://access.redhat.com/errata/RHSA-2026:84734"}]},{"source":"euvd","sourceId":"EUVD-2026-80081","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80081","tags":["ADVISORY"],"origins":[{"source":"euvd","sourceId":"EUVD-2026-80081","url":"https://euvd.enisa.europa.eu/vulnerability/EUVD-2026-80081"}]}],"packages":[],"pocCandidates":[],"cataloguedPoc":[],"vendorStatements":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:006fea51fee2672e37e526aa1d0fdd7e6f6f2dcf428fac12a2cc18b5b8ee8e02_s390x","product":"registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:006fea51fee2672e37e526aa1d0fdd7e6f6f2dcf428fac12a2cc18b5b8ee8e02_s390x as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256%3A006fea51fee2672e37e526aa1d0fdd7e6f6f2dcf428fac12a2cc18b5b8ee8e02?arch=s390x&repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9&tag=1790958549","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:2ab213b45e46bccd7c9287a9b402100d46d25e9e58118ae57864513de58e77ca_ppc64le","product":"registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:2ab213b45e46bccd7c9287a9b402100d46d25e9e58118ae57864513de58e77ca_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256%3A2ab213b45e46bccd7c9287a9b402100d46d25e9e58118ae57864513de58e77ca?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9&tag=1790958549","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:35a57dd79362703b69e563f84d18d2ec31359628a246e3c36b52ece728aa9f21_arm64","product":"registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:35a57dd79362703b69e563f84d18d2ec31359628a246e3c36b52ece728aa9f21_arm64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256%3A35a57dd79362703b69e563f84d18d2ec31359628a246e3c36b52ece728aa9f21?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9&tag=1790958549","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:856c7748eb45dbd190fb16fe90a09546ac8febf2f83e41d8068e8ac759442018_amd64","product":"registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9@sha256:856c7748eb45dbd190fb16fe90a09546ac8febf2f83e41d8068e8ac759442018_amd64 as a component of Red Hat OpenShift AI 3.4","status":"fixed","remediations":[{"category":"vendor_fix","details":"For Red Hat OpenShift AI 3.4.5 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update:\n\nhttps://docs.redhat.com/en/documentation/red_hat_openshift_ai/","url":"https://access.redhat.com/errata/RHSA-2026:84734"},{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."}],"purl":"pkg:oci/odh-kserve-storage-initializer-rhel9@sha256%3A856c7748eb45dbd190fb16fe90a09546ac8febf2f83e41d8068e8ac759442018?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-kserve-storage-initializer-rhel9&tag=1790958549","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_ai_inference_server:rhaii/vllm-cpu-rhel9","product":"rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_ai_inference_server:rhaii/vllm-gaudi-rhel9","product":"rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhaii/vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_ai_inference_server:rhaii/vllm-rocm-rhel9","product":"rhaii/vllm-rocm-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/vllm-rocm-rhel9?repository_url=registry.redhat.io/rhaii/vllm-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_ai_inference_server:rhaii/vllm-tpu-rhel9","product":"rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/vllm-tpu-rhel9?repository_url=registry.redhat.io/rhaii/vllm-tpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-cpu-rhel9","product":"rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/vllm-cpu-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-cpu-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-neuron-rhel9","product":"rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/vllm-neuron-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-neuron-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_ai_inference_server:rhaiis/vllm-spyre-rhel9","product":"rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/vllm-spyre-rhel9?repository_url=registry.redhat.io/rhaiis/vllm-spyre-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-aws-cuda-rhel9","product":"rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-aws-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-aws-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-azure-rocm-rhel9","product":"rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-azure-rocm-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-azure-rocm-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gaudi-rhel9","product":"rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/bootc-gaudi-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_enterprise_linux_ai_(rhel_ai)_3:rhelai3/bootc-gcp-cuda-rhel9","product":"rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/bootc-gcp-cuda-rhel9?repository_url=registry.redhat.io/rhelai3/bootc-gcp-cuda-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-agent-rhel9","product":"rhoai/odh-kserve-agent-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-agent-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-agent-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-kserve-router-rhel9","product":"rhoai/odh-kserve-router-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"none_available","details":"Affected"}],"purl":"pkg:oci/odh-kserve-router-rhel9?repository_url=registry.redhat.io/rhoai/odh-kserve-router-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-vllm-gaudi-rhel9","product":"rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_affected","remediations":[{"category":"workaround","details":"Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability."},{"category":"no_fix_planned","details":"Will not fix"}],"purl":"pkg:oci/odh-vllm-gaudi-rhel9?repository_url=registry.redhat.io/rhoai/odh-vllm-gaudi-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:1edfd89a924a83901845cd773012a3aeca70c09a2175a87e83351140efc80485_ppc64le","product":"registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:1edfd89a924a83901845cd773012a3aeca70c09a2175a87e83351140efc80485_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ai-gateway-payload-processing-rhel9@sha256%3A1edfd89a924a83901845cd773012a3aeca70c09a2175a87e83351140efc80485?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9&tag=1791860396","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:ec41ef535f621e901055f49a5e19db851c2f80450e95bab74921a1b15e3d1985_ppc64le","product":"registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:ec41ef535f621e901055f49a5e19db851c2f80450e95bab74921a1b15e3d1985_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-data-science-pipelines-argo-argoexec-rhel9@sha256%3Aec41ef535f621e901055f49a5e19db851c2f80450e95bab74921a1b15e3d1985?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9&tag=1791863121","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:2af57c8f8f90c8cb275c9ae6d498d6fff64a793e3dd3ba57fb5a9c369f6a2845_arm64","product":"registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9@sha256:2af57c8f8f90c8cb275c9ae6d498d6fff64a793e3dd3ba57fb5a9c369f6a2845_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kf-notebook-controller-rhel9@sha256%3A2af57c8f8f90c8cb275c9ae6d498d6fff64a793e3dd3ba57fb5a9c369f6a2845?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-kf-notebook-controller-rhel9&tag=1791864414","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-kube-auth-proxy-rhel9@sha256:401e57977f2ba2cbd7f551852f458c0a81a2fbae03fec8699e9e7fa3963c702a_ppc64le","product":"registry.redhat.io/rhoai/odh-kube-auth-proxy-rhel9@sha256:401e57977f2ba2cbd7f551852f458c0a81a2fbae03fec8699e9e7fa3963c702a_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-kube-auth-proxy-rhel9@sha256%3A401e57977f2ba2cbd7f551852f458c0a81a2fbae03fec8699e9e7fa3963c702a?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-kube-auth-proxy-rhel9&tag=1791862541","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9@sha256:31b2970302e3659f8a96a79fc5d423a878cfb74844d0351948d22cead52e9d6d_arm64","product":"registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9@sha256:31b2970302e3659f8a96a79fc5d423a878cfb74844d0351948d22cead52e9d6d_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-llm-d-inference-scheduler-rhel9@sha256%3A31b2970302e3659f8a96a79fc5d423a878cfb74844d0351948d22cead52e9d6d?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-llm-d-inference-scheduler-rhel9&tag=1790958114","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:1171af13d794a8f9cd498bd0d3d3720cf608e80b5854bd1a23391a7b38116329_amd64","product":"registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9@sha256:1171af13d794a8f9cd498bd0d3d3720cf608e80b5854bd1a23391a7b38116329_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ml-pipelines-launcher-rhel9@sha256%3A1171af13d794a8f9cd498bd0d3d3720cf608e80b5854bd1a23391a7b38116329?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-ml-pipelines-launcher-rhel9&tag=1791865662","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:3abbe016571b304ac6f3400713a1ff5261e8d4d6223a4e6e20b987a442c346e4_arm64","product":"registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9@sha256:3abbe016571b304ac6f3400713a1ff5261e8d4d6223a4e6e20b987a442c346e4_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mod-arch-automl-rhel9@sha256%3A3abbe016571b304ac6f3400713a1ff5261e8d4d6223a4e6e20b987a442c346e4?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-mod-arch-automl-rhel9&tag=1791861032","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:b47019a765e9de506d22176b8f4cc7fd353d72cb95944cb0052e9556065c8b8f_arm64","product":"registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9@sha256:b47019a765e9de506d22176b8f4cc7fd353d72cb95944cb0052e9556065c8b8f_arm64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-mod-arch-model-registry-rhel9@sha256%3Ab47019a765e9de506d22176b8f4cc7fd353d72cb95944cb0052e9556065c8b8f?arch=arm64&repository_url=registry.redhat.io/rhoai/odh-mod-arch-model-registry-rhel9&tag=1791860918","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:dd1dbea5e827dbc81338fc5f8b2e8551f196828f1339737f689f6b38f9bc828a_ppc64le","product":"registry.redhat.io/rhoai/odh-model-registry-rhel9@sha256:dd1dbea5e827dbc81338fc5f8b2e8551f196828f1339737f689f6b38f9bc828a_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-model-registry-rhel9@sha256%3Add1dbea5e827dbc81338fc5f8b2e8551f196828f1339737f689f6b38f9bc828a?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-model-registry-rhel9&tag=1791869365","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:ac50ad884d8f694cd5e2dd273a22b744ed9aee0ead433bad061e6e68800939de_amd64","product":"registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:ac50ad884d8f694cd5e2dd273a22b744ed9aee0ead433bad061e6e68800939de_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256%3Aac50ad884d8f694cd5e2dd273a22b744ed9aee0ead433bad061e6e68800939de?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9&tag=1791829658","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-ta-lmes-job-rhel9@sha256:a6a0c57a602d5a62517c585e0a50daf93f942bbfe6af7f7a19d9e837919bbef2_amd64","product":"registry.redhat.io/rhoai/odh-ta-lmes-job-rhel9@sha256:a6a0c57a602d5a62517c585e0a50daf93f942bbfe6af7f7a19d9e837919bbef2_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-ta-lmes-job-rhel9@sha256%3Aa6a0c57a602d5a62517c585e0a50daf93f942bbfe6af7f7a19d9e837919bbef2?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-ta-lmes-job-rhel9&tag=1791470318","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:a392475d6ebdf59f58a7c5655b0f27012f8d58c2a7bf35a5d7c8d9e567145e1e_amd64","product":"registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:a392475d6ebdf59f58a7c5655b0f27012f8d58c2a7bf35a5d7c8d9e567145e1e_amd64 as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256%3Aa392475d6ebdf59f58a7c5655b0f27012f8d58c2a7bf35a5d7c8d9e567145e1e?arch=amd64&repository_url=registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9&tag=1791785804","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"Red Hat OpenShift AI 3.4:registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:90dc900ff186b76245d319dbc7ffcbc81e6bed7a859d872513994e7a043afdea_ppc64le","product":"registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256:90dc900ff186b76245d319dbc7ffcbc81e6bed7a859d872513994e7a043afdea_ppc64le as a component of Red Hat OpenShift AI 3.4","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-workbench-jupyter-datascience-cpu-py312-rhel9@sha256%3A90dc900ff186b76245d319dbc7ffcbc81e6bed7a859d872513994e7a043afdea?arch=ppc64le&repository_url=registry.redhat.io/rhoai/odh-workbench-jupyter-datascience-cpu-py312-rhel9&tag=1791872084","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]},{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json","productId":"red_hat_openshift_ai_(rhoai):rhoai/odh-th-torch-cuda-py312-rhel9","product":"rhoai/odh-th-torch-cuda-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI)","status":"known_not_affected","remediations":[],"justification":"vulnerable_code_not_present","purl":"pkg:oci/odh-th-torch-cuda-py312-rhel9?repository_url=registry.redhat.io/rhoai/odh-th-torch-cuda-py312-rhel9","origins":[{"source":"redhat","sourceId":"CVE-2026-92220","modified":"2026-10-19T11:31:07+00:00","url":"https://security.access.redhat.com/data/csaf/v2/vex/2026/cve-2026-92220.json"}]}],"vendorCoverage":{"total":347,"shown":32,"omitted":315,"source":"redhat"}}