CVE-2026-18617 Red Hat CVE debrief

Who should care

Red Hat OpenShift AI 2.25 deployment administrators and security teams should assess exposure and take mitigation steps. Namespace editors and cluster administrators are particularly relevant roles to involve in the assessment and remediation process.

Why it matters

CVE-2026-18617 is a high-severity vulnerability in the Data Science Pipelines Operator (DSPO) that allows namespace editors to inject malicious parameters into the MySQL DSN string. This can lead to sensitive file exfiltration and privilege escalation. Defenders should prioritize verifying exposure in Red Hat OpenShift AI 2.25 deployments, especially where namespace editors have access. Immediate attention is required to assess and mitigate potential risks.

• Potential exfiltration of sensitive files, such as service account tokens
• Privilege escalation from namespace editor to cluster-admin privileges
• Possible disruption of service due to unauthorized access

Technical summary

The Data Science Pipelines Operator (DSPO) vulnerability allows namespace editors to inject malicious parameters into the MySQL Data Source Name (DSN) string via the spec.database.customExtraParams field. This can enable LOCAL INFILE functionality, potentially leading to sensitive file exfiltration and privilege escalation. The vulnerability affects Red Hat OpenShift AI 2.25 deployments. Defenders should prioritize verifying exposure, especially where namespace editors have access, and take immediate action to assess and mitigate potential risks.

Defensive priority

Defenders should prioritize verifying exposure in Red Hat OpenShift AI 2.25 deployments, especially where namespace editors have access. Immediate attention is required to assess and mitigate potential risks.

Recommended defensive actions

• Verify exposure in Red Hat OpenShift AI 2.25 deployments
• Assess namespace editor access and privileges
• Review and restrict spec.database.customExtraParams field usage
• Monitor for suspicious activity related to service account tokens
• Implement compensating controls for exposed systems
• Track exceptions and retest remediated assets
• Review vendor patch guidance for affected systems

Evidence notes

The CVE record and NVD detail page provide information on the vulnerability. Red Hat has released several errata related to this issue, including RHSA-2026:53261, RHSA-2026:53262, RHSA-2026:53263, RHSA-2026:60520, and RHSA-2026:65126. A bugzilla entry (2510304) is also available for further details.

Sources and references

Methodology and review provenance

AI-assisted synthesis based on stored public vulnerability evidence. System validation, approval state, and publication status do not by themselves establish human review of this revision. PatchSiren helps prioritize defensive review and does not prove exposure or remediation on any system.