Security bypass allows privilege escalation via podSpecPatch field
Summary
Security bypass allows privilege escalation via podSpecPatch field. Red Hat rates this important (CVSS 9.9). Weakness: CWE-807. Affected package(s): rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9:1776740351, rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9:1776740640, rhoai/odh-ml-pipelines-api-server-v2-rhel9:1776740726, rhoai/odh-data-science-pipelines-argo-argoexec-rhel9:1776740558, rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9:1776740366, rhoai/odh-ml-pipelines-driver-rhel9:1776740379. Resolved in Red Hat advisory RHSA-2026:10184 — update the affected packages (`sudo dnf update`).
- rhoai/odh-ml-pipelines-persistenceagent-v2-rhel9:1776740351
- rhoai/odh-data-science-pipelines-argo-workflowcontroller-rhel9:1776740640
- rhoai/odh-ml-pipelines-api-server-v2-rhel9:1776740726
- rhoai/odh-data-science-pipelines-argo-argoexec-rhel9:1776740558
- rhoai/odh-ml-pipelines-scheduledworkflow-v2-rhel9:1776740366
- rhoai/odh-ml-pipelines-driver-rhel9:1776740379
- rhoai/odh-ml-pipelines-launcher-rhel9:1776740386
Official advisory · high-confidence parse· fetched 4 hours ago·verify at source
- RHSA-2026:10184
Official advisory · high-confidence parse· fetched 4 hours ago·verify at source
Mitigation checklist
- Update the affected package(s) to the fixed version shipped in RHSA-2026:10184 (`sudo dnf update` / `yum update`).
Official advisory · high-confidence parse· fetched 4 hours ago·verify at source
Discussion(0)
No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.
Sign in to join the discussion.