RHSA-2026:34456CriticalCVSS 8.0

Red Hat Security Advisory: RHOAI 3.4.2 - Red Hat OpenShift AI

Published
July 1, 2026
Last Modified
August 23, 2026

🔗 CVE IDs covered (6)

CVE-2026-8643 →CVE-2026-33245 →CVE-2026-34993 →CVE-2026-48710 →CVE-2026-2614 →CVE-2026-5241 →

📋 Description

CVE-2026-2614 — mlflow: mlflow: Arbitrary file read via bypassed source path validation CVE-2026-5241 — python-transformers: python-transformers: Arbitrary code execution due to overridden trust_remote_code setting CVE-2026-8643 — python-pip: Path traversal via malicious entry point name in pip wheel installation allows arbitrary file overwrite CVE-2026-33245 — react-router: React Router: Cross-Site Scripting vulnerability via untrusted React Server Component redirects CVE-2026-34993 — aiohttp: AIOHTTP: Arbitrary code execution via untrusted input to CookieJar.load() CVE-2026-48710 — starlette: Starlette: Security restriction bypass via malformed HTTP Host header

🎯 Affected products200

  • Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:145511ba70395e89ad2b6861210d079d54a11159c53df100bcf17c60ccb0477b_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:1b151f2faf541c3e1923d511c49486611f24c8a974dc9ba071c5fb06f2753dd5_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:a51c06cfd0adf203ca974f659533412ea535e6e4280a9f5712f337f56f6d7a2a_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-ai-gateway-payload-processing-rhel9@sha256:e20ecd1b80acc565e347916368502d848c1d1a906f9b871040574f9f043d1cba_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-automl-rhel9@sha256:0e97b6f4559a12365d19c457180f63039f06f5233b190ad8101d1aba8857835c_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-automl-rhel9@sha256:6cde90e9b241d61eca654a1769588c026a36f7ee378c5e1e37992c3fb5105b35_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-automl-rhel9@sha256:81837e12dd1ee215fb18c10fefd0acb7b19479dc2eae4c1fb9c7b74834d126d4_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-automl-rhel9@sha256:ad917f5c31a2fcc8b8aaa66a7ddd810f7f3000e6972e583c5bba5ab553814766_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-autorag-rhel9@sha256:14b869d2c50ae52267b4a1f3432b1eb45de19f48489a1ce119aa14ffbadfeea2_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-autorag-rhel9@sha256:55f43d09fb11923d4bc334364decc4ab007b75794a969b232de6886743bd8c28_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-autorag-rhel9@sha256:60daf620603afa66fabee5deaa00b1bff499be916f5183f7a2283bdfe9470b6a_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-autorag-rhel9@sha256:dce6b5981d4b184e9f761f1ea45362bfabf00fe25756bfe0613bc9231700d874_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:686253283d14bf10162ddfc9172cd63e7c8485e3db3f9a15ee73161ae63af68a_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:68c795bfe9e3c098f18beb70032f687465c651cecb14d202977ed8152c1d6a21_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:82c0704fb5079cc2833c73de9994e3260c3e8d93655debd319a13e58a9cece6c_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-built-in-detector-rhel9@sha256:c00e6cec4e088ad3da95f60fd4b2a7149005c7d970bb87148f9d1d86d60c7114_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-cli-rhel9@sha256:3ee844ee5cfcd387011ade7127c7ca45022fc6dbaa1ee24b02590bf23921bf63_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-cli-rhel9@sha256:755cc95c98526ca7115f2846b91ec45687608e6d342e31ccfc17f67176cb1eee_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:3f902dd82d23d73ebee2342d2f4397d75561bd290bf50f87ac270d4aa50016c3_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:56b3db4ed55e1f30c3023da19724a46c821072226d5f15adba0de7559e28d0b0_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:6038a6aae07748c298880500284227ce61054efeef20228af49bfaa24fd56b92_s390x as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-dashboard-rhel9@sha256:b73dc027ea8f60f441ee4bc10100a5557e092d98b3994527f3d173fd3d76c9b4_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:1f9010a71cce7542ab5d5aff6f9273d8afbe3616ab2d2c1b660ec268ad878540_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:8d6b14a290adfceb30a1f86d2167beaa93901896cb00da92b79181e5146d35a0_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-argoexec-rhel9@sha256:ca86c4a7c704056fb702f8d78c9d1794993c30e96baaac3404aaa6337b54d2bf_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:6bfba499f4c005f867fd87cb1e1afa90cf0b4546a15a43532bfa8bcd032eceef_ppc64le as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:77fdb68eccbffb245439f5bb86d836767b321f234a9b0bf5f81dbc8d463fe193_arm64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9@sha256:aa891de5cd4fc7771c94e6df672db09311b999883f76096443c512f2ad0a36d7_amd64 as a component of Red Hat OpenShift AI 3.4
  • registry.redhat.io/rhoai/odh-data-science-pipelines-operator-controller-rhel9@sha256:1cbe1ea5a59a31143671391f3ba9e901b9e12205c5f0ee626596cf799fbd87e8_arm64 as a component of Red Hat OpenShift AI 3.4
  • +170 more not shown

✅ Remediation

For Red Hat OpenShift AI 3.4.2 see the following documentation, which will be updated shortly for this release, for important instructions on how to upgrade your cluster and fully apply this errata update: https://docs.redhat.com/en/documentation/red_hat_openshift_ai/ Workaround: Mitigation for this issue is either not available or the currently available options do not meet the Red Hat Product Security criteria comprising ease of use and deployment, applicability to widespread installation base or stability. Workaround: To mitigate this issue, users should avoid installing Python wheels from untrusted sources. It is strongly advised against using `pip install` with elevated privileges, such as `sudo`, when installing wheels. Additionally, administrators should inspect `entry_points.txt` within wheels for path separators or absolute paths before installation. Workaround: To mitigate this Cross-Site Scripting (XSS) vulnerability, ensure that applications utilizing React Router's unstable React Server Components (RSC) APIs only process redirects from trusted sources. Avoiding the use of these unstable APIs in production environments where untrusted redirect sources cannot be guaranteed is also recommended. Workaround: Applications using AIOHTTP that are configured to load untrusted files via the `CookieJar.load()` function should implement input sanitization prior to loading. This prevents the injection of malicious code. Workaround: Deploying an RFC-compliant reverse proxy (such as nginx, Apache, HAProxy, or Caddy) in front of the ASGI server will reject malformed Host headers before they reach the application. This is the most straightforward mitigation that does not require code changes. If custom middleware is present, it should be updated to use `request.scope["path"]` instead of `request.url.path` for any security decisions. The ASGI scope path is derived from the HTTP request line and is not influenced by the Host header, so it reflects the actual request target.

🔗 References (10)