CVE-2026-18951Odh-training-operator-rhel9: [trainer v2 security] trn-02: rhoai overlay aggregates trainjobs crud into standard edit clusterrole

Description

A flaw was found in the Red Hat OpenShift AI (RHOAI) overlay for the training operator. The RHOAI overlay incorrectly aggregates `trainjobs` management permissions into the native Kubernetes `edit ClusterRole`. This allows any user with `edit ClusterRole` permissions in a namespace to create, modify, and delete `TrainJobs`. When combined with a separate vulnerability (TRN-01) that permits arbitrary pod configurations, a remote attacker with namespace editor privileges could exploit this to escalate privileges, potentially leading to arbitrary code execution.

Timeline

Scores

EPSS (exploitation in 30 days)

0.92% · top 39% of all CVEs (14 Nov 2026)

CISA SSVC

Exploitation: none · Automatable: no · Technical impact: total

The list uses the assigner's score when there is one, then CISA's, then NVD's: High 8.8.

Affected products

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1785188461 – < *

• Red Hat · Red Hat OpenShift AI 3.3

  • unaffected 1790137153 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1784814352 – < *

• Red Hat · Red Hat OpenShift AI 3.4

  • unaffected 1787361677 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1786552271 – < *

• Red Hat · Red Hat OpenShift AI 3.5

  • unaffected 1786552250 – < *

What to do

Workaround: Administrators should review and adjust their Kubernetes RBAC configurations within Red Hat OpenShift AI to ensure that `trainjobs` permissions are explicitly managed. This involves removing `trainjobs` from the `aggregate-to-edit` ClusterRole labels or requiring explicit `RoleBinding` for `trainjobs` access. This prevents implicit permission grants to namespace editors and reduces the attack surface. Consult Kubernetes documentation for specific instructions on modifying ClusterRoles and RoleBindings. A restart or reload of affected components may be required for changes to take effect.

Sources

The same CVE in the primary databases and aggregators, to check against.

• CVE.org record (opens in a new tab)
• CVE List JSON (GitHub) (opens in a new tab)
• NVD (opens in a new tab)
• FIRST EPSS (opens in a new tab)
• EUVD EUVD-2026-55821 (opens in a new tab)
• OSV.dev (opens in a new tab)
• GitHub Advisories (opens in a new tab)
• CIRCL Vulnerability-Lookup (opens in a new tab)

Badge for a README or a ticket

[![CVE-2026-18951](https://cveledger.app/badge/CVE-2026-18951.svg)](https://cveledger.app/cve/CVE-2026-18951)

Record last updated 30 Sept 2026, 16:21 UTC.