RHSA-2026:27784HighCVSS 8.8

Red Hat Security Advisory: RHOAI 3.4.1 - Red Hat OpenShift AI

Published
June 22, 2026
Last Modified
October 9, 2026

🔗 CVE IDs covered (1)

📋 Description

CVE-2026-42271 — litellm: LiteLLM: Authenticated command execution via MCP stdio test endpoints

🎯 Affected products10

  • Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-operator-bundle@sha256:0efd1bb73b277b4cdca47bcb424679de6fd094d04e73e7a3ed0c470e8040b440_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:4b8e9cda02c30b95aa6e483dd9f90b2e27b9093212c6c3d956be8da3dd00dd16_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:72648350ddd7a3401542e90f923df38adb4ee75ded438dade1bc472566f474dc_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:76341c99cdb9a4321a37a58b1757ed0327bcf8d3adfa5688109f138a16b5ef04_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-rhel9-operator@sha256:cc6f060d37c92ea68c955e637e6291863272c1992ba86bc872989c4b566fc8bf_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:1c962bba45e5cddaadd8ceff241417f9c3686aba1df8b6b511caf5a9901f2c40_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:1d6d4da4451688faa350b05558ed601e5c498b2382923f1bf45fc41958b098f6_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:305bf281a63bff13b96466fb7adfd0962ac28e92d649ad692a86eb10db89a1a0_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:5149bc20e5d0a9e281ca3330d000d613b5987f46996e771067532af0fe3e0fb8_ppc64le as a component of Red Hat OpenShift AI 3.4

✅ Remediation

For Red Hat OpenShift AI 3.4.1 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/

🔗 References (5)