ODH Model-Controller LoadSecret Namespace Leak
CVE-2026-16456 Published on August 10, 2026
Odh-model-controller: odh-model-controller: cross-namespace secret read via nim account crd confused deputy
A flaw was found in the `odh-model-controller`. An authenticated user with permissions to create custom resources can exploit a vulnerability in the `loadSecret` function. This function improperly reads the Secret namespace from user-controlled input without validation. This allows an attacker to read sensitive API keys and cloud credentials from other namespaces, leading to information disclosure.
Vulnerability Analysis
CVE-2026-16456 is exploitable with network access, and requires small amount of user privileges. This vulnerability is considered to have a low attack complexity. The potential impact of an exploit of this vulnerability is considered to have a high impact on confidentiality, with no impact on integrity and availability.
Timeline
Reported to Red Hat.
Made public. 55 days later.
Weakness Type
What is a Confused Deputy Vulnerability?
The product receives a request, message, or directive from an upstream component, but the product does not sufficiently preserve the original source of the request before forwarding the request to an external actor that is outside of the product's control sphere. This causes the product to appear to be the source of the request, leading it to act as a proxy or other intermediary between the upstream component and the external actor.
CVE-2026-16456 has been classified to as a Confused Deputy vulnerability or weakness.
Products Associated with CVE-2026-16456
Want to know whenever a new CVE is published for Red Hat Openshift Ai? stack.watch will email you.
Affected Versions
Red Hat OpenShift AI 2.25:- Version 1785187158 and below * is unaffected.
- Version 1785189333 and below * is unaffected.
- Version 1784950479 and below * is unaffected.