RHSA-2026:1027HighCVSS 8.8

Red Hat Security Advisory: RHOAI 3.2 - Red Hat OpenShift AI

Published
January 22, 2026
Last Modified
September 3, 2026

🔗 CVE IDs covered (2)

CVE-2025-62593 →CVE-2025-66418 →

📋 Description

CVE-2025-62593 — ray: Ray is vulnerable to RCE via Safari & Firefox Browsers through DNS Rebinding Attack CVE-2025-66418 — urllib3: urllib3: Unbounded decompression chain leads to resource exhaustion

🎯 Affected products200

  • Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:1028c9154ce0ddf2b9b77522a3725f512d1eaf2d2f6232bf20dfdaad6cbee7c0_ppc64le as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:1c623239b67da42d69fe4094c2cc6e9cc2aab953eeb0466c3064f4384e42002a_s390x as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:43f56335fdb80e29853afaf5b0df3a0841fe224d8510300f7df9074a62b7acf7_amd64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:7583c776d706fa49d21132459c5e97d8d503af20f2dfa78a8c035fb91c93661b_arm64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:0c8170213a80d83ebe01d7cf726854403d3894528d19052fa6e70d134f41bb5f_s390x as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:142a07079dbf0e87e3b9aef469b276ba9d656a0789d70cc32f9a0fd1fb895ec3_arm64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:2bbd7c2b6c8f475892845418c6f6525cf8f99a59e011e906996116d32e206fa7_ppc64le as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:8f67ce0131865edf2269b3d903718b04566f627bbee2d7926c19ecc25936fd27_amd64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:795f44ff4dfa4ecfdc64b57d5ba45b14f436d9e447481ff5afa96ccbfae4f73a_ppc64le as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:9e74a9baba1fc2d43dd72a7ef6cbedb4fe1503209e25ff2045e3bad2ff3f4fd7_amd64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:e23f79fee3fd4cceb2816ed3332a0b6f3f9d8b39e53aa6793959d622fd26f621_arm64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:5f9453f808ead1d0bf7beb86cd2c64bf010265e8482ac292436a5cd615aaa5a9_arm64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:e0f453a8c98ee22adc28b0b156db9d8a1be7a3d96b5a3a7aa2b9c0b4512006c9_ppc64le as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:f1ec464aa1e5f91fbdca863c60e25d956376843a3d7fe54c7c2e8cd8272968b8_amd64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:362842aa9a2c8cb25b08daf61d5df26111be3dc505d5a0d6b43d5550e2b0299b_ppc64le as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:827ec2244557fe0687e63168f1a81eb69e00b0a56b263fd25c983f406038811b_amd64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:e5116eda3c134df5fecc14f51d3a092f16de1faaa84f5d462b19b0041f8bf4c9_arm64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:15c8eddf6faf05048c44892265abf56ed2c0e3e6f5570a4f0ab052c02b75afaf_arm64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:496472cf4116e92c8d6dc78db6c13c3a0eebb539beda4d2fb0dd1e0f7ed24082_ppc64le as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-feast-operator-rhel9@sha256:dfe2b4d2c9e9b255916656cb38c6268920896051b014264b10b0da898c445f94_amd64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:254ebbb481b7b5c761d7b537ccaf5ef4e022b0016327f9c393a38d4a3705e8dd_arm64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:8596e8a6d0d2c7998454eb4a5601c9bbaa3b4916699decc1162f8f8db565d521_amd64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:f49987707b75350132792faed91fc00251ef9ff91423d4ead416cc056134c4ab_ppc64le as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:6329362af9d0448664d8d5b671cd78be2d7a8dbd9a48426cad80139a1bd7d385_s390x as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:7fb8a508647f9b7c773fbbbb6f5259fb88e0a74b4bd3ca7d79102a2d74538803_ppc64le as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:8c7d83ece25fd618a7423ba41923f9f7236a191555e763ecb6a61f0ae4010086_amd64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-fms-guardrails-orchestrator-rhel9@sha256:b4257f59bb9e30568d36e0bb721f2e7c2210792f2810ad22e82bb46be7d3bf72_arm64 as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-guardrails-detector-huggingface-runtime-rhel9@sha256:2fb59daa9f9547e13559661182284c5654ffb79a05ca11a581360e433c03af54_s390x as a component of Red Hat OpenShift AI 3.2
  • registry.redhat.io/rhoai/odh-guardrails-detector-huggingface-runtime-rhel9@sha256:6c9270cde9276f65b80ee35b9d6be199cd98cc835c0ecc7c63ae55706152f6e6_arm64 as a component of Red Hat OpenShift AI 3.2
  • +170 more not shown

✅ Remediation

For Red Hat OpenShift AI 3.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Workaround: Mitigation for this issue is either not available or the currently available options don't meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base, or stability.

🔗 References (6)