RHSA-2026:24544HighCVSS 7.5
Red Hat Security Advisory: Red Hat AI Inference 3.4.1 (cuda)
🔗 CVE IDs covered (2)
📋 Description
CVE-2026-44431 — urllib3: urllib3: Information disclosure via cross-origin redirects forwarding sensitive headers CVE-2026-44432 — urllib3: urllib3: Denial of Service due to excessive HTTP response decompression
🎯 Affected products3
- Red Hat AI Inference Server 3.4
- registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:3c71d1adbb5d811a19c04d1d4d907d0a67fd671dd5c3638d2f8ed5ad363192e0_amd64 as a component of Red Hat AI Inference Server 3.4
- registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:6ce25732de012437b2087e37cffdc6aff2480aed1940591e00d7c65395d11c50_arm64 as a component of Red Hat AI Inference Server 3.4
✅ Remediation
For more information visit https://access.redhat.com/errata/RHSA-2026:24544
🔗 References (6)
- selfhttps://access.redhat.com/errata/RHSA-2026:24544
- externalhttps://access.redhat.com/security/cve/CVE-2026-44431
- externalhttps://access.redhat.com/security/cve/CVE-2026-44432
- externalhttps://access.redhat.com/security/updates/classification/
- externalhttps://www.redhat.com/en/products/ai/inference-server
- selfhttps://security.access.redhat.com/data/csaf/v2/advisories/2026/rhsa-2026_24544.json