RHSA-2026:24541HighCVSS 7.5
Red Hat Security Advisory: Red Hat AI Inference 3.4.1 (spyre)
🔗 CVE IDs covered (2)
📋 Description
CVE-2026-44431 — urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44432 — urllib3: urllib3: Denial of Service due to excessive HTTP response decompression
🎯 Affected products4
- Red Hat AI Inference Server 3.4
- registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:a89b09f6ec94078c599339b7feee9a0ddfc8048b748169310ed03f4c652d11f8_s390x as a component of Red Hat AI Inference Server 3.4
- registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:e12e1c6d65d4b41e530057a37765f36afcfa4e1cf85996bb4ebe13cef713b7d3_amd64 as a component of Red Hat AI Inference Server 3.4
- registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:f4aa279db2108029bfd1aa1329bccb7144a166fccbbc1d670494f2106d847691_ppc64le as a component of Red Hat AI Inference Server 3.4
✅ Remediation
For more information visit https://access.redhat.com/errata/RHSA-2026:24541
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2026:24541
- externalhttps://access.redhat.com/security/cve/CVE-2026-44431
- externalhttps://access.redhat.com/security/cve/CVE-2026-44432
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://www.redhat.com/en/products/ai/inference-server
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24541.json