A critical information disclosure vulnerability in the odh-dashboard component of Red Hat OpenShift AI could allow an attacker to obtain Kubernetes Service Account tokens and gain unauthorized cluster access.

This vulnerability involves the improper exposure of sensitive information via a NodeJS endpoint, categorized as CWE-201. The CVSS vector indicates that while the attack is network-accessible, it requires low privileges (authenticated) to exploit, potentially leading to a total compromise of confidentiality, integrity, and availability within the container environment.

The potential for unauthorized access to Kubernetes Service Account tokens poses a severe risk to the entire cluster environment. An attacker could leverage these tokens to move laterally, escalate privileges, or access sensitive data stored within the infrastructure. With a CVSS score of 8.5, this high-severity flaw requires immediate remediation to prevent significant operational disruption or data breaches.

Immediate Action: Apply the vendor-provided security updates identified in the referenced Red Hat errata (RHSA-2026:7397, RHSA-2026:7398, RHSA-2026:7403, and RHSA-2026:7404) to patch the affected odh-dashboard versions.

Proactive Monitoring: Review Kubernetes audit logs for anomalous service account token usage or unexpected API calls originating from the odh-dashboard component.

Compensating Controls: Implement strict Network Policies and Role-Based Access Control (RBAC) to limit the permissions associated with service accounts, ensuring that even if a token is compromised, the blast radius remains minimized.

Public Exploit Available: Unknown

Given the high CVSS score and the potential for a full cluster compromise, organizations must prioritize the deployment of the official Red Hat patches. Administrators should verify their current OpenShift AI version and apply the corresponding fixed builds immediately to mitigate the risk of token theft and unauthorized resource access.