RHSA-2026:24542HighCVSS 7.5
Red Hat Security Advisory: Red Hat AI Inference Model Optimization Tools 3.4.1 (cuda)
🔗 CVE IDs covered (2)
📋 Description
CVE-2026-44431 — urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44432 — urllib3: urllib3: Denial of Service due to excessive HTTP response decompression
🎯 Affected products3
- Red Hat AI Inference Server 3.4
- registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:4ebb2714d965c93f532eb68f6a0425387e821c84684d80abd176c555892d7469_arm64 as a component of Red Hat AI Inference Server 3.4
- registry.redhat.io/rhaii/model-opt-cuda-rhel9@sha256:7f19c82fb04f5d9ac59cfd84ae8a60da85ca53f122ec72088be648b335b78935_amd64 as a component of Red Hat AI Inference Server 3.4
✅ Remediation
For more information visit https://access.redhat.com/errata/RHSA-2026:24542
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2026:24542
- externalhttps://access.redhat.com/security/cve/CVE-2026-44431
- externalhttps://access.redhat.com/security/cve/CVE-2026-44432
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://www.redhat.com/en/products/ai/inference-server
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24542.json