CVE-2026-18621

Summary

A flaw was found in Data Science Pipelines (DSP). An attacker with namespace editor privileges can bypass security hardening by submitting a malicious Argo Workflow through the V1 API path. This allows the API server to create pods with elevated privileges, acting as a 'confused deputy' on behalf of the attacker. Successful exploitation grants the attacker node-root access, enabling arbitrary code execution and full control over the underlying node.

Affected Software

VendorProductVersion RangeStatus
Red HatRed Hat OpenShift AI 2.251785189934 < *unaffected
Red HatRed Hat OpenShift AI 2.251788256711 < *unaffected
Red HatRed Hat OpenShift AI 3.31785187920 < *unaffected
Red HatRed Hat OpenShift AI 3.41784924951 < *unaffected
Red HatRed Hat OpenShift AI 3.41787173417 < *unaffected

Weaknesses

  • CWE-266: Incorrect Privilege Assignment

Workarounds

To mitigate this issue, ensure that Data Science Project (DSP) namespaces enforce pod-security.kubernetes.io/enforce: restricted. Additionally, verify that the pipeline-runner ServiceAccount is not bound to privileged or anyuid Security Context Constraints (SCCs).

ADP Enrichment

CISA ADP Vulnrichment

  • SSVC:
  • Exploitation: none
    • Automatable: no
    • Technical Impact: partial

References