Skip to content
VulniPulse
Sign in
Medium6.5Vendor: CriticalRed Hat Linux

Medium [CVE-2026-48710] Security restriction bypass via malformed HTTP Host header

This medium-severity Red Hat Linux advisory covers CVE-2026-48710 affecting Red Hat AI Inference Server 3.3, Red Hat Ansible Automation Platform 2.6, Red Hat Ansible Automation Platform 2.7.

CVE-2026-48710 Published May 26, 2026
CVE-2026-48710
Affected products & platforms
Red Hat LinuxUnclassified
Open vendor advisory

Android app · Google Play

Monitor future Red Hat Linux CVEs from your phone.

Choose a whole vendor or a precise platform, then receive matching security advisories by phone notification, email, or both. Coverage follows 32 official vendor sources and 160+ reviewed platform categories.

Matching phone alertsOptional email delivery
Get CVE alertsSee app features

Summary

Security restriction bypass via malformed HTTP Host header. Red Hat rates this critical (CVSS 6.5).

Weakness: CWE-1289.

Affected package(s): rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:1782132660, rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1782133865, rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:1782132444, satellite/iop-host-inventory-rhel9:1780414237, satellite/foreman-mcp-server-rhel9:1780492012, rhoai/odh-trustyai-nemo-guardrails-server-rhel9:1782420349.

Resolved in Red Hat advisory RHSA-2026:34526 — update the affected packages (`sudo dnf update`).

Affected products named by the advisory: Red Hat AI Inference Server 3.3; Red Hat Ansible Automation Platform 2.6; Red Hat Ansible Automation Platform 2.7; Red Hat OpenShift AI 3.3; and 8 more.

Affected versions
  • rhoai/odh-workbench-jupyter-pytorch-rocm-py312-rhel9:1782132660
  • rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9:1782133865
  • rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9:1782132444
  • satellite/iop-host-inventory-rhel9:1780414237
  • satellite/foreman-mcp-server-rhel9:1780492012
  • rhoai/odh-trustyai-nemo-guardrails-server-rhel9:1782420349
  • rhoai/odh-workbench-jupyter-trustyai-cpu-py312-rhel9:1782135300
  • rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9:1782132686
  • satellite/iop-host-inventory-rhel9:1780403026
  • rhoai/odh-llama-stack-core-rhel9:1782132126
  • ansible-automation-platform-26/lightspeed-chatbot-rhel9:1780102732
  • rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9:1782132767

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Fixed versions
  • RHSA-2026:34526

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Mitigation checklist

Recommended fix / mitigation
  • Update the affected package(s) to the fixed version shipped in RHSA-2026:34526 (`sudo dnf update` / `yum update`).

Official advisory · high-confidence parse· fetched 2 months ago·verify at source

Discussion(0)

No comments yet. Share field notes, upgrade gotchas, or questions — verify against the vendor advisory before acting on community advice.

Sign in to join the discussion.