CVE-2024-7557
highpriority · track · 35EPSS 0.009 · 61 %ileEUUSEPSS · scored 2026-10-28
A vulnerability was found in OpenShift AI that allows for authentication bypass and privilege escalation across models within the same namespace. When deploying AI models, the UI provides the option to protect models with authentication. However, credentials from one model can be used to access other models and APIs within the same namespace. The exposed ServiceAccount tokens, visible in the UI, can be utilized with oc --token={token} to exploit the elevated view privileges associated with the ServiceAccount, leading to unauthorized access to additional resources.
cvss
Technical severity, 0–10. One row per scoring source.
base score 0–10 · higher = more severe · hover a vector to decode
ssvc
A stakeholder decision — act, attend, or track — from exploitation and impact.
weaknesses
The CWE weakness classes this flaw belongs to.
affected products (2)
Products and version ranges known to be affected.
- redhat openshift data scienceall versionsnvdUScpe:2.3:a:redhat:openshift_data_science:*:*:*:*:*:*:*:*
also known as (3)
Other names and identifiers for this entity.
sources
Which sources assert this record, and when.
references (11)
External citations — patches, advisories, analysis.
- https://access.redhat.com/security/cve/CVE-2024-7557cnnvd
- https://access.redhat.com/security/cve/cve-2024-7557cnnvd
- https://bugzilla.redhat.com/show_bug.cgi?id=2303094cnnvd
- https://cxsecurity.com/cveshow/CVE-2024-7557/cnnvd
- https://github.com/opendatahub-io/odh-model-controller/releases/tag/v0.12.0.4Patchcnnvd
- https://access.redhat.com/security/cve/CVE-2024-7557enisa_euvd
- https://bugzilla.redhat.com/show_bug.cgi?id=2303094enisa_euvd
- https://github.com/opendatahub-io/odh-dashboard/pull/3198enisa_euvd
Attackers weaponise vulnerabilities like this against internet-exposed services. See what is exposed on your perimeter with a free passive scan.
Free scan