CVE-2026-15218 Detail

Nvd.Nist • August 18, 2026

This CVE record has recently been published to the CVE List and has been included within the NVD dataset.

A flaw was found in the maas-api and maas-controller ServiceAccounts within Red Hat OpenShift AI. These ServiceAccounts are granted cluster-wide permissions that exceed their operational requirements. An attacker who compromises the identity of these ServiceAccounts, either through a remote code execution vulnerability or by creating a malicious pod in the same namespace, could exploit these excessive permissions. This could lead to full cluster administrator privileges through the creation of new ClusterRoleBindings or the disclosure of sensitive information by accessing all secrets across the cluster.

By selecting these links, you will be leaving NIST webspace. We have provided these links to other web sites because they may have information that would be of interest to you. No inferences should be drawn on account of other sites being referenced, or not, from this page. There may be other web sites that are more appropriate for your purpose. NIST does not necessarily endorse the views expressed, or concur with the facts presented on these sites. Further, NIST does not endorse any commercial products that may be mentioned on these sites. Please address this page to [email protected] .

The full story

This article is one source in a clustered incident — the cluster page carries the summary, timeline and every other outlet covering it.

Critical Flaw in Red Hat OpenShift AI ServiceAccounts Exposes Cluster Risks A vulnerability identified as CVE-2026-15218 affects the maas-api and maas-controller ServiceAccounts in Red Hat OpenShift AI. These accounts possess excessive cluster-wide permissions, which could be exploited by an attacker who compromises their identity. The attack vector includes remote code execution or the creation of malicious pods within the same namespace. Successful exploitation could grant full cluster administrator privileges or lead to unauthorized access to sensitive information across the cluster. The flaw is classified as moderate, with the potential for significant impact if exploited. Red Hat has published preliminary CVSS scores, indicating the severity of the issue. The vulnerability was published on August 17, 2026, and remains under review for further assessment. Security teams are advised to monitor their environments for signs of exploitation. 2 sources 55

Extracted Entities

CVE-2026-15218 Detail

The full story

Extracted Entities

Attack Types (1)

CVEs (1)

CWE Weaknesses (2)

MITRE ATT&CK (2)

Platforms (1)