What is GHSA-335x-vvmj-55qx?

GHSA-335x-vvmj-55qx is a security advisory published by GitHub Security Advisories with High severity. A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the...

Which CVE IDs does GHSA-335x-vvmj-55qx cover?

GHSA-335x-vvmj-55qx covers the following CVE IDs: CVE-2026-13717. Each CVE has its own detail page on EchelonGraph Pulse with the synthesized EG score.

What is the CVSS v3 score of GHSA-335x-vvmj-55qx?

GHSA-335x-vvmj-55qx has a CVSS v3 base score of 8.8, published by GitHub Security Advisories.

GHSA-335x-vvmj-55qxHighCVSS 8.8

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the...

Vendor

GitHub Security Advisories

Published

August 10, 2026

Last Modified

August 11, 2026

🔗 CVE IDs covered (1)

CVE-2026-13717 →

📋 Description

A flaw was found in the Red Hat OpenShift AI (RHOAI) MaaS Gateway. Improper configuration of the Gateway in a model-serving context allows a standard user with low privileges to intercept, read, log, and alter all MaaS model traffic. This includes sensitive information such as access keys, input prompts, and outputs, leading to significant information disclosure and data tampering.

🔗 References (5)

https://nvd.nist.gov/vuln/detail/CVE-2026-13717
https://access.redhat.com/security/cve/CVE-2026-13717
https://bugzilla.redhat.com/show_bug.cgi?id=2494203
https://access.redhat.com/errata/RHSA-2026:53262
https://github.com/advisories/GHSA-335x-vvmj-55qx