BlackTreeCVE Intelligence
← Back to the CVE catalogue
Full vulnerability report · 2026
CVE-2026-48710High confidence

Kludex Starlette HTTP Request/Response Smuggling Vulnerability

Kludex · starlette

Official source article: GitHub GHSA-86QP-5C8J-P5MR ↗. Check the applicable product and release in the original source.

6.5MediumCVSS 3.1
Recommended action
Patch now

CISA confirms exploitation in the wild and lists 2026-09-16 as the remediation due date.

Patch available
R
Operational reassessment

Published severity in operational context

Open reassessment dashboard →
Published severityMediumOperational priority:Critical, raised 2 bands.upgradedsince 2 Sep 2026

Evidence used

  • CISA confirms exploitation in the wild.
  • A structured source references public exploit or proof-of-concept material.
  • The selected CVSS metric records a network-reachable, unauthenticated path with no user interaction.
  • EPSS is 7.06% for the current model date.

Compensating controls

  • Validate the affected product branch and deploy the verified fixed release.
  • Restrict the affected network interface to trusted sources where business-safe.
  • Increase monitoring for the attack path and post-exploitation behaviour described in the report.

Verification

  1. Confirm that the asset runs Kludex starlette and falls inside the recorded affected range.
  2. Verify the installed build against the product-specific fixed version after deployment.
  3. Validate exposure, authentication requirements and compensating controls in the actual environment.
  4. Reopen this reassessment when CVSS, KEV, EPSS, exploit evidence or remediation changes.
Mitigation target: Within 3 daysRemediation target: Within 90 days

This automated reassessment organises public evidence. It does not know asset exposure, business impact or control effectiveness and does not replace CVSS or a human risk decision.

Distribution package intelligence

Release-specific package status

Debian, ubuntu findings are scoped to the named distribution, release and source package. An absent finding does not mean a package is unaffected.

5 package states
Repository candidate not checked

A published vendor fix does not prove that a matching update is enabled and installable on a particular asset. Confirm the local package candidate before scheduling remediation.

Distribution releaseSource packageVendor stateFixed versionEvidence
Debian trixietrixie · sourcestarletteVendor fix publishedDebian records a fixed source-package version for this release.0.46.1-3+deb13u2Debian Security Tracker ↗Source updated 6 Oct 2026
Debian bookwormbookworm · sourcestarletteVendor fix publishedDebian records a fixed source-package version for this release.0.26.1-1+deb12u1Debian Security Tracker ↗Source updated 6 Oct 2026
Debian forkyforky · sourcestarletteVendor fix publishedDebian records a fixed source-package version for this release.1.1.0-1Debian Security Tracker ↗Source updated 6 Oct 2026
Debian sidsid · sourcestarletteVendor fix publishedDebian records a fixed source-package version for this release.1.1.0-1Debian Security Tracker ↗Source updated 6 Oct 2026
Ubuntu 24.04 LTSnoble · standard archivestarletteUnder evaluationCanonical reports that the package might be affected and still needs evaluation or fixing.Not published in this feedCanonical Ubuntu Security ↗Source updated 5 Oct 2026
Open-source package ranges2 source-attributed ranges

These OSV and GitHub advisory ranges apply only to the named package and ecosystem. A listed fixed version is not a universal product patch or proof that an update is installed.

Ecosystem and packageAffected rangeFirst fixed versionEvidence
PyPIstarletteECOSYSTEM: introduced 0; fixed 1.0.11.0.1OSV record ↗aggregator derived · 10 Sep 2026
pipstarlette<= 1.0.01.0.1GitHub advisory ↗upstream repository advisory · 28 Aug 2026
Direct vendor intelligence

Authoritative vendor CSAF and VEX advisories

Structured product status and remediation from the issuing vendor. Product-state explanations are always visible; large lists can be searched or downloaded.

3 current
CVE-2026-48710 · CSAF 2.0 · revision 3 · finalRed Hat Product Securitystarlette: Starlette: Security restriction bypass via malformed HTTP Host header
29 known affected

The vendor explicitly identifies these products as affected by this CVE.

  • openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed
  • rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server
  • rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server
  • rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server
  • rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server
  • rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server
  • ansible-automation-platform-25/lightspeed-chatbot-rhel8 as a component of Red Hat Ansible Automation Platform 2
  • rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
  • rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
  • rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
  • rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
  • rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3
Summary
A flaw was found in Starlette, a lightweight ASGI (Asynchronous Server Gateway Interface) framework. A remote attacker could exploit this vulnerability by sending a specially crafted HTTP `Host` request header. This malformed header could cause the `request.url` to be incorrectly reconstructed, leading to a discrepancy with the actual requested path. Consequently, security restrictions enforced by middleware and endpoints that rely on `request.url` for validation could be bypassed, potentially allowing unauthorized access or actions.
Remediation
For more information visit https://access.redhat.com/errata/RHSA-2026:30089
CVE-2026-48710 · CSAF 2.0 · revision 2 · interimSUSE Product Security TeamCVE-2026-48710
10 recommended

The vendor recommends these product versions as the target state.

  • python313-starlette-0.41.3-160000.3.1 as component of SUSE Linux Enterprise Server 16.0
  • python313-starlette-0.41.3-160099.4.3 as component of SUSE Linux Enterprise Server 16.1
  • python313-starlette-0.41.3-160000.3.1 as component of SUSE Linux Enterprise Server for SAP applications 16.0
  • python313-starlette-0.41.3-160000.3.1 as component of openSUSE Leap 16.0
  • python311-google-adk-2.2.0-1.1 as component of openSUSE Tumbleweed
  • python311-starlette-1.2.0-1.1 as component of openSUSE Tumbleweed
  • python313-google-adk-2.2.0-1.1 as component of openSUSE Tumbleweed
  • python313-starlette-1.2.0-1.1 as component of openSUSE Tumbleweed
  • python314-google-adk-2.2.0-1.1 as component of openSUSE Tumbleweed
  • python314-starlette-1.2.0-1.1 as component of openSUSE Tumbleweed
Summary
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 3.2 / RFC 3986 3.2.2 when constructing `request.url` and falls back to `scope["server"]` for malformed values.
Remediation
To install this SUSE Security Update use the SUSE recommended installation methods like YaST online_update or "zypper patch".
CVE-2026-48710 · CSAF 2.0 · revision 1 · finalStackable Product Security TeamStackable Security Advisory for: CVE-2026-48710
8 known not affected

The vendor explicitly states that these products are not affected by this CVE.

  • pkg:pypi/starlette@0.47.2@pkg:oci/airflow@sha256%3A413100ba2cb4db0d44057b3caf3bc8326ee40d9b3dd949ec289e5dc5f85ca7d9?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow
  • pkg:pypi/starlette@0.48.0@pkg:oci/airflow@sha256%3A97d12e5a214c94ed8606cff7a859c79a8922120244e8dc899c8581a343615ff5?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow
  • pkg:pypi/starlette@0.47.2@pkg:oci/airflow@sha256%3Ab76c7375a627636e13db6ac41147805172db85464e366e6fafd8c20e6a7e3046?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow
  • pkg:pypi/starlette@0.48.0@pkg:oci/airflow@sha256%3Ae7949e338f28d85e51c70b1319a11ae545516dcf0eb75ca757fd69bf16e4590e?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow
  • pkg:pypi/starlette@0.46.2@pkg:oci/airflow@sha256%3Abac4a703fceeec87fee04e92da8feb8d7fd922f151186ee8c6b14c9444190f2d?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow
  • pkg:pypi/starlette@0.47.2@pkg:oci/airflow@sha256%3A6d4b45a99cc85a574611af243edcf31e367ac4e3e437d49f02987fe1a80b0e36?arch=amd64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow
  • pkg:pypi/starlette@0.46.2@pkg:oci/airflow@sha256%3Ae1228b2b5b67ef0aaa6331764acc9d786e65475ea5429a459758d6590104367b?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow
  • pkg:pypi/starlette@0.47.2@pkg:oci/airflow@sha256%3Ac232050f870ec81f1af449e0db34e5b1b515fea9c23adfb9f71156b130bffcb3?arch=arm64&repository_url=oci.stackable.tech%2Fsdp%2Fairflow
Summary
Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope["server"]` for malformed values.
Remediation
No remediation text is recorded.
Optional official sources

National CERT insights
?CERT means Computer Emergency Response Team; CSIRT is the closely related term Computer Security Incident Response Team.

Choose official national sources for this report. Each advisory shows its original language. Your selection is remembered on this device and included in shared links.

Official European source

ENISA European Vulnerability Database

Official EUVD identifiers, advisory evidence and known-exploited context. Missing fields are not treated as evidence of low risk.

1 current
ENISA EUVD identifier

EUVD-2026-32016

CISA KEV mirrored by ENISA

Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope["server"]` for malformed values.

EUVD state
Present in the current official mapping
Known exploitation
Recorded by ENISA since 2 Sep 2026. Evidence sources: cisa_kev.
ENISA score
6.5 · CVSS 3.1
Advisory evidence
23 linked advisory records
Explicit mitigation evidence

Only statements that explicitly mention a fix, patch, update, workaround or mitigation are shown here.

  • csaf_ncscnl · NCSC-2026-0171Kwetsbaarheid verholpen in Starlette
  • csaf_suse · SUSE-SU-2026:22151-1Security update for python-starlette
  • csaf_redhat · RHSA-2026:24866Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.6 Container Release Update
  • csaf_redhat · RHSA-2026:23346Red Hat Security Advisory: Red Hat Ansible Automation Platform 2.7 Container Release Update
  • csaf_opensuse · openSUSE-SU-2026:20975-1Security update for python-starlette
Recommended actionPatch now

CISA confirms exploitation in the wild and lists 2026-09-16 as the remediation due date.

Patch available
01

What, why and how

Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.

What

Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.

Why

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

How

An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may bypass an access boundary or take over an account.

What

Kludex Starlette contains a HTTP request/response smuggling vulnerability that could allow attackers to inject paths into the host part, prepending the actual path leading to issues such as authentication bypass when the authentication depends on the reconstructed URL’s path. This vulnerability could be chaned with CVE-2026-42271.

Why

The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

How

An attacker operating through a network path may attempt exploitation without authentication or user interaction. If successful, the issue may bypass an access boundary or take over an account.

02

Exploit reality and attack path

CVSS severity, EPSS forecast probability, public exploit material and CISA-confirmed exploitation are separate signals.

Observed exploitation
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
Confirmed in the wild

CISA added this CVE to its Known Exploited Vulnerabilities catalogue on 2026-09-02.

Public PoC / exploit material
?Confirmed exploitation and public exploit material are separate signals. Attacks can occur without public proof-of-concept or exploit code.
Reference recorded

A structured CVE source labels at least one public reference as exploit material. BlackTree has not independently validated that it is safe, reliable or weaponised.

Likely attack path
a network path → Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling') → bypass an access boundary or take over an account
Attack surface
Network
Privileges required
None: unauthenticated exploitation is possible
User interaction
None
Attack complexity
Low: no specialised conditions are recorded
Security boundary
Unchanged: impact remains within the vulnerable component's security authority
Weakness
?CWE means Common Weakness Enumeration: a standard category for the underlying weakness.
CWE-444 ↗

CWE-444: Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling'). The product acts as an intermediary HTTP agent (such as a proxy or firewall) in the data flow between two entities such as a client and server, but it does not interpret malformed HTTP requests or responses in ways that are consistent with how the messages will be processed by those entities that are at the ultimate destination.

CVSS vector
?CVSS means Common Vulnerability Scoring System. The vector records the metric values used to calculate technical severity.
CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:L/I:L/A:N

Common Vulnerability Scoring System 3.1: the compact vector below is decoded into plain language.

AVNetworkAttack vector: The vulnerable component can be reached over a network.ACLowAttack complexity: No specialised conditions are required beyond attacker-controlled input.PRNonePrivileges required: The attacker does not need an account or existing privileges.UINoneUser interaction: No action by another user is required.SUnchangedScope: The security impact remains within the vulnerable component's authority.CLowConfidentiality impact: A successful attack can cause a limited loss.ILowIntegrity impact: A successful attack can cause a limited loss.ANoneAvailability impact: No direct loss is represented by this metric.
Post-exploitation / living off the land
Stolen credentials, tokens and legitimate administration functions may provide continued access without deploying a large custom toolset.
NetworkUnauthenticatedCWE-444CISA KEVPublic exploit reference
A

Official authority intelligence

Only matched European and national findings are included. Language selectors and unavailable sources are omitted.

ENISA EUVD · EUVD-2026-32016Known-exploited evidence recorded

Starlette is a lightweight ASGI framework/toolkit. Prior to version 1.0.1, the HTTP `Host` request header was not validated before being used to reconstruct `request.url`. Because the routing algorithm relies on the raw HTTP path while `request.url` is rebuilt from the `Host` header, a malformed header could make `request.url.path` differ from the path that was actually requested. Middleware and endpoints that apply security restrictions based on `request.url` (rather than the raw `scope` path) could therefore be bypassed. Users should upgrade to a version greater than or equal to version 1.0.1, which validates the `Host` header against the grammar of RFC 9112 §3.2 / RFC 3986 §3.2.2 when constructing `request.url` and falls back to `scope["server"]` for malformed values.

Official EUVD record ↗
CERT-FR · French · CERTFR-2026-AVI-1206Multiples vulnérabilités dans les produits IBM

ecord?id=CVE-2026-47244 Référence CVE CVE-2026-47838 https://www.cve.org/CVERecord?id=CVE-2026-47838 Référence CVE CVE-2026-4800 https://www.cve.org/CVERecord?id=CVE-2026-4800 Référence CVE CVE-2026-48006 https://www.cve.org/CVERecord?id=CVE-2026-48006 Référence CVE CVE-2026-48043 https://www.cve.org/CVERecord?id=CVE-2026-48043 Référence CVE CVE-2026-48059 https://www.cve.org/CVERecord?id=CVE-2026-48059 Référence CVE CVE-2026-48155 https://www.cve.org/CVERecord?id=CVE-2026-48155 Référence CVE CVE-2026-48156 https://www.cve.org/CVERecord?id=CVE-2026-48156 Référence CVE CVE-2026-4867 https://www.cve.org/CVERecord?id=CVE-2026-4867 Référence CVE CVE-2026-48710 https://www.cve.org/CVERecord?id=CVE-2026-48710 Référence CVE CVE-2026-48735 https://www.cve.org/CVERecord?id=CVE-2026-48735 Référence CVE CVE-2026-48817 https://www.cve.org/CVERecord?id=CVE-2026-48817 Référence CVE CVE-2026-48818 https://www.cve.org/CVERecord?id=CVE-2026-48818 Référence CVE CVE-2026-49460 https://www.cve.org/CVERecord?id=CVE-2026-49460 Référence CVE CVE-2026-49461 https://www.cve.org/CVERecord?id=CVE-2026-49461 Référence CVE CVE-2026-49476 https://www.cve.org/CVERecord?id=CVE-2026-49476 Référence CVE CVE-2026-49477 https://www.cve.org/CVERecord?id=CVE-2026-49477 Référence CVE CVE-2026-49844 https://www.cve.org/CVERecord?id=

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-1094Multiples vulnérabilités dans les produits IBM

d?id=CVE-2026-46968 Référence CVE CVE-2026-47010 https://www.cve.org/CVERecord?id=CVE-2026-47010 Référence CVE CVE-2026-47021 https://www.cve.org/CVERecord?id=CVE-2026-47021 Référence CVE CVE-2026-47027 https://www.cve.org/CVERecord?id=CVE-2026-47027 Référence CVE CVE-2026-47057 https://www.cve.org/CVERecord?id=CVE-2026-47057 Référence CVE CVE-2026-47058 https://www.cve.org/CVERecord?id=CVE-2026-47058 Référence CVE CVE-2026-47059 https://www.cve.org/CVERecord?id=CVE-2026-47059 Référence CVE CVE-2026-47063 https://www.cve.org/CVERecord?id=CVE-2026-47063 Référence CVE CVE-2026-47265 https://www.cve.org/CVERecord?id=CVE-2026-47265 Référence CVE CVE-2026-48710 https://www.cve.org/CVERecord?id=CVE-2026-48710 Référence CVE CVE-2026-48713 https://www.cve.org/CVERecord?id=CVE-2026-48713 Référence CVE CVE-2026-48775 https://www.cve.org/CVERecord?id=CVE-2026-48775 Référence CVE CVE-2026-48779 https://www.cve.org/CVERecord?id=CVE-2026-48779 Référence CVE CVE-2026-4878 https://www.cve.org/CVERecord?id=CVE-2026-4878 Référence CVE CVE-2026-48801 https://www.cve.org/CVERecord?id=CVE-2026-48801 Référence CVE CVE-2026-48864 https://www.cve.org/CVERecord?id=CVE-2026-48864 Référence CVE CVE-2026-48988 https://www.cve.org/CVERecord?id=CVE-2026-48988 Référence CVE CVE-2026-49157 https://www.cve.org/CVERecord?id=CV

Official advisory ↗
CERT-FR · French · CERTFR-2026-AVI-0933Multiples vulnérabilités dans les produits IBM

d?id=CVE-2026-45674 Référence CVE CVE-2026-47265 https://www.cve.org/CVERecord?id=CVE-2026-47265 Référence CVE CVE-2026-47691 https://www.cve.org/CVERecord?id=CVE-2026-47691 Référence CVE CVE-2026-48155 https://www.cve.org/CVERecord?id=CVE-2026-48155 Référence CVE CVE-2026-48156 https://www.cve.org/CVERecord?id=CVE-2026-48156 Référence CVE CVE-2026-48522 https://www.cve.org/CVERecord?id=CVE-2026-48522 Référence CVE CVE-2026-48523 https://www.cve.org/CVERecord?id=CVE-2026-48523 Référence CVE CVE-2026-48524 https://www.cve.org/CVERecord?id=CVE-2026-48524 Référence CVE CVE-2026-48525 https://www.cve.org/CVERecord?id=CVE-2026-48525 Référence CVE CVE-2026-48710 https://www.cve.org/CVERecord?id=CVE-2026-48710 Référence CVE CVE-2026-48735 https://www.cve.org/CVERecord?id=CVE-2026-48735 Référence CVE CVE-2026-48988 https://www.cve.org/CVERecord?id=CVE-2026-48988 Référence CVE CVE-2026-48990 https://www.cve.org/CVERecord?id=CVE-2026-48990 Référence CVE CVE-2026-50010 https://www.cve.org/CVERecord?id=CVE-2026-50010 Référence CVE CVE-2026-50170 https://www.cve.org/CVERecord?id=CVE-2026-50170 Référence CVE CVE-2026-50171 https://www.cve.org/CVERecord?id=CVE-2026-50171 Référence CVE CVE-2026-50557 https://www.cve.org/CVERecord?id=CVE-2026-50557 Référence CVE CVE-2026-52725 https://www.cve.org/CVERecord?id=

Official advisory ↗
JVN iPedia · Japanese · JVNDB-2026-017908EncodeのStarletteにおけるHTTP リクエストスマグリングに関する脆弱性

Starletteは軽量なASGIフレームワークおよびツールキットです。バージョン1.0.1以前では、HTTPの`Host`リクエストヘッダーが`request.url`を再構築する前に検証されていませんでした。ルーティングアルゴリズムは生のHTTPパスに依存していますが、一方で`request.url`は`Host`ヘッダーから再構築されるため、悪意のあるヘッダーによって`request.url.path`が実際にリクエストされたパスと異なる可能性がありました。そのため、`request.url`に基づいてセキュリティ制限を適用するミドルウェアやエンドポイントはバイパスされる恐れがあります。ユーザーには、`Host`ヘッダーをRFC 9112 §3.2およびRFC 3986 §3.2.2の文法に従って検証し、`request.url`の構築時に誤った値が使用された場合は`scope["server"]`にフォールバックするバージョン1.0.1以降へアップグレードすることを推奨します。

Official advisory ↗
KISA KrCERT/CC · Korean · KNVD-6941美 CISA 발표 주요 Exploit 정보공유(Update. 2026-09-02)

Kludex Starlette HTTP Request/Response Smuggling Vulnerability

Official advisory ↗
NCSC-NL · Dutch · NCSC-2026-0171Kwetsbaarheid verholpen in Starlette

Starlette versions before 1.0.1 did not validate the HTTP Host header when reconstructing request URLs, allowing attackers to inject paths and potentially bypass authentication based on the reconstructed URL path.

Official advisory ↗
03

Patch and workaround

Operational remediation based on structured source evidence.

Status
?Patch availability is based on structured fixed-version fields and authoritative update references. If no fix is verified, check the vendor advisory before making a change.
Patch available
Affected
Fixed
Action
For more information visit https://access.redhat.com/errata/RHSA-2026:30089
Workaround
A mitigation or workaround reference is available from the source linked below; validate it against the affected product and version.
04

Evidence and provenance

Published 26 May 2026 · Last source change 1 Oct 2026, 17:41 UTC · CWE-444 · Inconsistent Interpretation of HTTP Requests ('HTTP Request/Response Smuggling')

CVE recordCVE.org · 5.2
CVSS sourceCNA
EPSS source
?The date BlackTree first stored a score for this CVE from the daily FIRST EPSS feed.
FIRST · tracked since 2026-08-14
European sourceENISA EUVD · EUVD-2026-32016
Product sourceVendor CSAF · Red Hat Product Security
Remediation sourceVendor CSAF · Red Hat Product Security
CWE sourceCNA
NVD statusNVD enriched

Core structured fields are present and their contributing authorities are shown above.

Material change intelligence

What changed after publication

View recent updates ↗
  1. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-rocm-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:5da2be9bd0fa0c7344e8a0b84c0cb8f3a78a1c7fc5fc76db6a7daaa2d71324f9_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:81c5994dc20321f8bd3969099eade78ef127cbd79f2d0ccea101c773e4c7fa4d_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:0d22e2301ce26ef68effda5d3a4a20381ad0ea34d1240e159e245bd44c2e125b_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:94721a151f43ffdfe11b5551ac37cbcf5ff6b991345ca2fc300684cf0a740435_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:97f7af7da4505d0420c49719bed4b49855abb1fa3193d65e5f201d0d501eeee7_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:e491c3b169ec77c37dbe0eb9c2b35dd976ca6e968f43b5d72ad5c4095f48d2ed_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:11ad6e13c41728944d933c7abe01d1d10ecb3f8e8b4f0da50ec53b7df6f036a8_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:340cecbac6b168cb0414f242832f153e6f3655052bfd98252f9e2d507509cabf_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:40c5ed966b693ab9b6f1e71455c04eb42c5c0010c356ab5526218ab3034bede2_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:6b855616de644893c5ee76cd6e496478762f941855f05e47bdac27aa259a7aae_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:8f3b2de1d5a8fdba70e937ff1ab95c0584cec32a4d58b1e636ea130a6461cea1_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b600c4226c78042f1a7d596f8f567dd2d9a97b5b3bb9b008d994c6bfb12bd7f1_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; and 79 more
    After
    openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; ansible-automation-platform-25/lightspeed-chatbot-rhel8 as a component of Red Hat Ansible Automation Platform 2; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-rocm-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:5da2be9bd0fa0c7344e8a0b84c0cb8f3a78a1c7fc5fc76db6a7daaa2d71324f9_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:81c5994dc20321f8bd3969099eade78ef127cbd79f2d0ccea101c773e4c7fa4d_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:0d22e2301ce26ef68effda5d3a4a20381ad0ea34d1240e159e245bd44c2e125b_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:94721a151f43ffdfe11b5551ac37cbcf5ff6b991345ca2fc300684cf0a740435_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:97f7af7da4505d0420c49719bed4b49855abb1fa3193d65e5f201d0d501eeee7_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:e491c3b169ec77c37dbe0eb9c2b35dd976ca6e968f43b5d72ad5c4095f48d2ed_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:11ad6e13c41728944d933c7abe01d1d10ecb3f8e8b4f0da50ec53b7df6f036a8_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:340cecbac6b168cb0414f242832f153e6f3655052bfd98252f9e2d507509cabf_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:40c5ed966b693ab9b6f1e71455c04eb42c5c0010c356ab5526218ab3034bede2_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:6b855616de644893c5ee76cd6e496478762f941855f05e47bdac27aa259a7aae_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:8f3b2de1d5a8fdba70e937ff1ab95c0584cec32a4d58b1e636ea130a6461cea1_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b600c4226c78042f1a7d596f8f567dd2d9a97b5b3bb9b008d994c6bfb12bd7f1_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; and 79 more
    Red Hat Product Security ↗
  2. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-rocm-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:5da2be9bd0fa0c7344e8a0b84c0cb8f3a78a1c7fc5fc76db6a7daaa2d71324f9_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:81c5994dc20321f8bd3969099eade78ef127cbd79f2d0ccea101c773e4c7fa4d_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:0d22e2301ce26ef68effda5d3a4a20381ad0ea34d1240e159e245bd44c2e125b_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:94721a151f43ffdfe11b5551ac37cbcf5ff6b991345ca2fc300684cf0a740435_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:97f7af7da4505d0420c49719bed4b49855abb1fa3193d65e5f201d0d501eeee7_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:e491c3b169ec77c37dbe0eb9c2b35dd976ca6e968f43b5d72ad5c4095f48d2ed_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:11ad6e13c41728944d933c7abe01d1d10ecb3f8e8b4f0da50ec53b7df6f036a8_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:340cecbac6b168cb0414f242832f153e6f3655052bfd98252f9e2d507509cabf_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:40c5ed966b693ab9b6f1e71455c04eb42c5c0010c356ab5526218ab3034bede2_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:6b855616de644893c5ee76cd6e496478762f941855f05e47bdac27aa259a7aae_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:8f3b2de1d5a8fdba70e937ff1ab95c0584cec32a4d58b1e636ea130a6461cea1_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b600c4226c78042f1a7d596f8f567dd2d9a97b5b3bb9b008d994c6bfb12bd7f1_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; and 75 more
    After
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-rocm-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:5da2be9bd0fa0c7344e8a0b84c0cb8f3a78a1c7fc5fc76db6a7daaa2d71324f9_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:81c5994dc20321f8bd3969099eade78ef127cbd79f2d0ccea101c773e4c7fa4d_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:0d22e2301ce26ef68effda5d3a4a20381ad0ea34d1240e159e245bd44c2e125b_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:94721a151f43ffdfe11b5551ac37cbcf5ff6b991345ca2fc300684cf0a740435_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:97f7af7da4505d0420c49719bed4b49855abb1fa3193d65e5f201d0d501eeee7_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:e491c3b169ec77c37dbe0eb9c2b35dd976ca6e968f43b5d72ad5c4095f48d2ed_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:11ad6e13c41728944d933c7abe01d1d10ecb3f8e8b4f0da50ec53b7df6f036a8_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:340cecbac6b168cb0414f242832f153e6f3655052bfd98252f9e2d507509cabf_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:40c5ed966b693ab9b6f1e71455c04eb42c5c0010c356ab5526218ab3034bede2_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:6b855616de644893c5ee76cd6e496478762f941855f05e47bdac27aa259a7aae_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:8f3b2de1d5a8fdba70e937ff1ab95c0584cec32a4d58b1e636ea130a6461cea1_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b600c4226c78042f1a7d596f8f567dd2d9a97b5b3bb9b008d994c6bfb12bd7f1_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; and 79 more
    Red Hat Product Security ↗
  3. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-rocm-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:5da2be9bd0fa0c7344e8a0b84c0cb8f3a78a1c7fc5fc76db6a7daaa2d71324f9_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:94721a151f43ffdfe11b5551ac37cbcf5ff6b991345ca2fc300684cf0a740435_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:97f7af7da4505d0420c49719bed4b49855abb1fa3193d65e5f201d0d501eeee7_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:6b855616de644893c5ee76cd6e496478762f941855f05e47bdac27aa259a7aae_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:8f3b2de1d5a8fdba70e937ff1ab95c0584cec32a4d58b1e636ea130a6461cea1_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b600c4226c78042f1a7d596f8f567dd2d9a97b5b3bb9b008d994c6bfb12bd7f1_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:7a6bbe8a084a47e55c3f9d48156eac0aefe99ebbc17052dad50768e4ab31d85a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:06f92dc1000eeef794c71234dd05e64b684d27bee25a2b62d49f9a4e611eb309_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:caaa83c557fdef72753d67bfbdaab38898c1fedb85089c51e154512ef22c917b_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:1b88511ef80ea5522de6519dc44c0204ae832b5faf0e331af170247bd7d7d288_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:6279ac2ba5f99869b69df905a8d7acc40c5470b37efccd1e1ef3c31b603779dc_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:2300bbd398742940737a7ac3bc337a81c3300ee3a362e246acf94ea543e5186a_amd64 as a component of Red Hat OpenShift AI 3.3; and 69 more
    After
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-rocm-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:5da2be9bd0fa0c7344e8a0b84c0cb8f3a78a1c7fc5fc76db6a7daaa2d71324f9_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:81c5994dc20321f8bd3969099eade78ef127cbd79f2d0ccea101c773e4c7fa4d_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:0d22e2301ce26ef68effda5d3a4a20381ad0ea34d1240e159e245bd44c2e125b_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:94721a151f43ffdfe11b5551ac37cbcf5ff6b991345ca2fc300684cf0a740435_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:97f7af7da4505d0420c49719bed4b49855abb1fa3193d65e5f201d0d501eeee7_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:e491c3b169ec77c37dbe0eb9c2b35dd976ca6e968f43b5d72ad5c4095f48d2ed_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:11ad6e13c41728944d933c7abe01d1d10ecb3f8e8b4f0da50ec53b7df6f036a8_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:340cecbac6b168cb0414f242832f153e6f3655052bfd98252f9e2d507509cabf_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:40c5ed966b693ab9b6f1e71455c04eb42c5c0010c356ab5526218ab3034bede2_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:6b855616de644893c5ee76cd6e496478762f941855f05e47bdac27aa259a7aae_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:8f3b2de1d5a8fdba70e937ff1ab95c0584cec32a4d58b1e636ea130a6461cea1_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b600c4226c78042f1a7d596f8f567dd2d9a97b5b3bb9b008d994c6bfb12bd7f1_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; and 75 more
    Red Hat Product Security ↗
  4. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 4 more · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:7a6bbe8a084a47e55c3f9d48156eac0aefe99ebbc17052dad50768e4ab31d85a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:06f92dc1000eeef794c71234dd05e64b684d27bee25a2b62d49f9a4e611eb309_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:caaa83c557fdef72753d67bfbdaab38898c1fedb85089c51e154512ef22c917b_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:1b88511ef80ea5522de6519dc44c0204ae832b5faf0e331af170247bd7d7d288_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:6279ac2ba5f99869b69df905a8d7acc40c5470b37efccd1e1ef3c31b603779dc_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:2300bbd398742940737a7ac3bc337a81c3300ee3a362e246acf94ea543e5186a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:7b5d9229b556e775c92ea99f5e1741c9231c00830063a3193cf18e0dabf2daa6_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:abcf19dad3e36cf2105a9e083f93c659cd5a4169a2bdbb4c590f6790af2dd358_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d07410afbf595a9be989c5a33f781f881e5d23488457fdb3bd0fe4dec7f5255e_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d5dfd771b6a7a242f53a7e3d8d6f951812f3350193bd807e4a0433316cafd78f_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:19f6df5cd367e8cca417be8d2d9d0a2c014266c5420394f563f525296da70662_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:468932363456901017639ec9f53c5538248cc542cfed76741b9c44ce9f2f5192_ppc64le as a component of Red Hat OpenShift AI 3.3; and 63 more
    After
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-rocm64-torch291-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-cuda-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-gaudi-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-vllm-rocm-rhel9 as a component of Red Hat OpenShift AI (RHOAI) · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaii/vllm-cpu-rhel9@sha256:5da2be9bd0fa0c7344e8a0b84c0cb8f3a78a1c7fc5fc76db6a7daaa2d71324f9_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:94721a151f43ffdfe11b5551ac37cbcf5ff6b991345ca2fc300684cf0a740435_arm64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-cuda-rhel9@sha256:97f7af7da4505d0420c49719bed4b49855abb1fa3193d65e5f201d0d501eeee7_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:6b855616de644893c5ee76cd6e496478762f941855f05e47bdac27aa259a7aae_ppc64le as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:8f3b2de1d5a8fdba70e937ff1ab95c0584cec32a4d58b1e636ea130a6461cea1_amd64 as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/rhaii/vllm-spyre-rhel9@sha256:b600c4226c78042f1a7d596f8f567dd2d9a97b5b3bb9b008d994c6bfb12bd7f1_s390x as a component of Red Hat AI Inference Server 3.4; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:7a6bbe8a084a47e55c3f9d48156eac0aefe99ebbc17052dad50768e4ab31d85a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:06f92dc1000eeef794c71234dd05e64b684d27bee25a2b62d49f9a4e611eb309_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:caaa83c557fdef72753d67bfbdaab38898c1fedb85089c51e154512ef22c917b_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:1b88511ef80ea5522de6519dc44c0204ae832b5faf0e331af170247bd7d7d288_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:6279ac2ba5f99869b69df905a8d7acc40c5470b37efccd1e1ef3c31b603779dc_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:2300bbd398742940737a7ac3bc337a81c3300ee3a362e246acf94ea543e5186a_amd64 as a component of Red Hat OpenShift AI 3.3; and 69 more
    Red Hat Product Security ↗
  5. Affected versionsThe structured affected or fixed version information changed.
    Before
    < 1.0.1 · Fixed: An authoritative update reference is available, but the fixed version is not recorded in the structured CVE fields. Check the linked vendor advisory for the applicable release.
    After
    starlette: < 1.0.1 · Fixed: RHSA-2026:30089: Red Hat AI Inference Server 3.3
    CNA ↗
  6. Vendor guidanceAuthoritative vendor guidance changed: removed vendor advisory: access.redhat.com/RHSA-2026:63337.
    Before
    mitigation: badhost.org · mitigation: ostif.org/disclosing-the-badhost-vulnerability-in-starlette · mitigation: secwest.net/starlette · 5 more references
    After
    mitigation: badhost.org · mitigation: ostif.org/disclosing-the-badhost-vulnerability-in-starlette · mitigation: secwest.net/starlette · 4 more references
    security-advisories@github.com ↗
  7. Vendor guidanceAuthoritative vendor guidance changed: added vendor advisory: access.redhat.com/RHSA-2026:63337.
    Before
    mitigation: badhost.org · mitigation: ostif.org/disclosing-the-badhost-vulnerability-in-starlette · mitigation: secwest.net/starlette · 4 more references
    After
    mitigation: badhost.org · mitigation: ostif.org/disclosing-the-badhost-vulnerability-in-starlette · mitigation: secwest.net/starlette · 5 more references
    security-advisories@github.com ↗
  8. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 4 more · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:7a6bbe8a084a47e55c3f9d48156eac0aefe99ebbc17052dad50768e4ab31d85a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:06f92dc1000eeef794c71234dd05e64b684d27bee25a2b62d49f9a4e611eb309_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:caaa83c557fdef72753d67bfbdaab38898c1fedb85089c51e154512ef22c917b_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:1b88511ef80ea5522de6519dc44c0204ae832b5faf0e331af170247bd7d7d288_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:6279ac2ba5f99869b69df905a8d7acc40c5470b37efccd1e1ef3c31b603779dc_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:2300bbd398742940737a7ac3bc337a81c3300ee3a362e246acf94ea543e5186a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:7b5d9229b556e775c92ea99f5e1741c9231c00830063a3193cf18e0dabf2daa6_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:abcf19dad3e36cf2105a9e083f93c659cd5a4169a2bdbb4c590f6790af2dd358_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d07410afbf595a9be989c5a33f781f881e5d23488457fdb3bd0fe4dec7f5255e_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d5dfd771b6a7a242f53a7e3d8d6f951812f3350193bd807e4a0433316cafd78f_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:19f6df5cd367e8cca417be8d2d9d0a2c014266c5420394f563f525296da70662_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:468932363456901017639ec9f53c5538248cc542cfed76741b9c44ce9f2f5192_ppc64le as a component of Red Hat OpenShift AI 3.3; and 62 more
    After
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 4 more · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:7a6bbe8a084a47e55c3f9d48156eac0aefe99ebbc17052dad50768e4ab31d85a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:06f92dc1000eeef794c71234dd05e64b684d27bee25a2b62d49f9a4e611eb309_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:caaa83c557fdef72753d67bfbdaab38898c1fedb85089c51e154512ef22c917b_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:1b88511ef80ea5522de6519dc44c0204ae832b5faf0e331af170247bd7d7d288_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:6279ac2ba5f99869b69df905a8d7acc40c5470b37efccd1e1ef3c31b603779dc_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:2300bbd398742940737a7ac3bc337a81c3300ee3a362e246acf94ea543e5186a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:7b5d9229b556e775c92ea99f5e1741c9231c00830063a3193cf18e0dabf2daa6_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:abcf19dad3e36cf2105a9e083f93c659cd5a4169a2bdbb4c590f6790af2dd358_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d07410afbf595a9be989c5a33f781f881e5d23488457fdb3bd0fe4dec7f5255e_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d5dfd771b6a7a242f53a7e3d8d6f951812f3350193bd807e4a0433316cafd78f_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:19f6df5cd367e8cca417be8d2d9d0a2c014266c5420394f563f525296da70662_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:468932363456901017639ec9f53c5538248cc542cfed76741b9c44ce9f2f5192_ppc64le as a component of Red Hat OpenShift AI 3.3; and 63 more
    Red Hat Product Security ↗
  9. ENISA known-exploited stateENISA EUVD now records this CVE in its known-exploited dataset.
    Before
    not listed in ENISA EUVD known-exploited dataset
    After
    listed in ENISA EUVD known-exploited dataset (EUVD-2026-32016)
    ENISA EUVD ↗
  10. BlackTree coverageBlackTree article coverage changed from no BlackTree article to 1 BlackTree article.
    Before
    no BlackTree article
    After
    1 BlackTree article
    BlackTree editorial ↗
  11. CISA KEV stateCISA KEV now confirms exploitation in the wild.
    Before
    not listed in CISA KEV
    After
    listed in CISA KEV since 2026-09-02
    CISA KEV ↗
  12. Vendor guidanceAuthoritative vendor guidance changed: removed vendor advisory: access.redhat.com/RHSA-2026:60520.
    Before
    mitigation: badhost.org · mitigation: ostif.org/disclosing-the-badhost-vulnerability-in-starlette · mitigation: secwest.net/starlette · 5 more references
    After
    mitigation: badhost.org · mitigation: ostif.org/disclosing-the-badhost-vulnerability-in-starlette · mitigation: secwest.net/starlette · 4 more references
    security-advisories@github.com ↗
  13. Vendor guidanceAuthoritative vendor guidance changed: added vendor advisory: access.redhat.com/RHSA-2026:60520.
    Before
    mitigation: badhost.org · mitigation: ostif.org/disclosing-the-badhost-vulnerability-in-starlette · mitigation: secwest.net/starlette · 4 more references
    After
    mitigation: badhost.org · mitigation: ostif.org/disclosing-the-badhost-vulnerability-in-starlette · mitigation: secwest.net/starlette · 5 more references
    security-advisories@github.com ↗
  14. Affected versionsThe structured affected or fixed version information changed.
    Before
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-automl-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 5 more · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:7a6bbe8a084a47e55c3f9d48156eac0aefe99ebbc17052dad50768e4ab31d85a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:06f92dc1000eeef794c71234dd05e64b684d27bee25a2b62d49f9a4e611eb309_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:caaa83c557fdef72753d67bfbdaab38898c1fedb85089c51e154512ef22c917b_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:1b88511ef80ea5522de6519dc44c0204ae832b5faf0e331af170247bd7d7d288_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:6279ac2ba5f99869b69df905a8d7acc40c5470b37efccd1e1ef3c31b603779dc_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:2300bbd398742940737a7ac3bc337a81c3300ee3a362e246acf94ea543e5186a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:7b5d9229b556e775c92ea99f5e1741c9231c00830063a3193cf18e0dabf2daa6_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:abcf19dad3e36cf2105a9e083f93c659cd5a4169a2bdbb4c590f6790af2dd358_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d07410afbf595a9be989c5a33f781f881e5d23488457fdb3bd0fe4dec7f5255e_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d5dfd771b6a7a242f53a7e3d8d6f951812f3350193bd807e4a0433316cafd78f_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:19f6df5cd367e8cca417be8d2d9d0a2c014266c5420394f563f525296da70662_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:468932363456901017639ec9f53c5538248cc542cfed76741b9c44ce9f2f5192_ppc64le as a component of Red Hat OpenShift AI 3.3; and 55 more
    After
    exploit-intelligence-tech-preview/vulnerability-analysis-rhel9 as a component of Exploit Intelligence; openshift-lightspeed/lightspeed-ocp-rag-rhel9 as a component of OpenShift Lightspeed; openshift-lightspeed/lightspeed-service-api-rhel9 as a component of OpenShift Lightspeed; rhaii/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-gaudi-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaii/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-cpu-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-neuron-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-spyre-rhel9 as a component of Red Hat AI Inference Server; rhaiis/vllm-tpu-rhel9 as a component of Red Hat AI Inference Server; rhelai3/bootc-aws-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-azure-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gaudi-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-gcp-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/bootc-rocm-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhelai3/disk-image-cuda-rhel9 as a component of Red Hat Enterprise Linux AI (RHEL AI) 3; rhoai/odh-built-in-detector-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-nlp-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-caikit-tgis-serving-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-guardrails-detector-huggingface-runtime-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-autogluon-server-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-kserve-storage-initializer-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-llm-d-kv-cache-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-mlflow-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cpu-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); rhoai/odh-th06-cuda130-torch210-py312-rhel9 as a component of Red Hat OpenShift AI (RHOAI); and 4 more · Fixed: registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:9165ca6c4f41ed4f5cdf5c590bfad74e22abe23737adfdc40a4c4b340b10e309_arm64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-cuda-rhel9@sha256:d869df392f711437069fa0c808428694c945d4b79e5dd77c718f68403cd71629_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/rhaiis/vllm-rocm-rhel9@sha256:993e84c73225a7c5e2df63756643a26b054b665eb6c15599d9decbbce91b6863_amd64 as a component of Red Hat AI Inference Server 3.3; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:264726e334c529ad8a6e8f0fb1591cff3360fc57b9bfec4d937852e8c636547a_arm64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:4f334f34591be73a659548d4f2f3f59bff8ba7e2c76863d9eb81ed67c3c78e75_ppc64le as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:c14363d97da2591ea16578d2825ac7841102bcd205f0d014bc04697257b9c907_s390x as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-26/lightspeed-chatbot-rhel9@sha256:e66798c501870aded1197e33098b181135d7465275f7b18969ac73846db2ae6b_amd64 as a component of Red Hat Ansible Automation Platform 2.6; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:06177277bcfbd5914db291f5e20567e7f7d1b36448106f5a23e5d39f5e58efe5_amd64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/ansible-automation-platform-27/lightspeed-chatbot-rhel9@sha256:fe2c85706bc05aee376a230d559a25fab5170d1e459d785d06ad82dfb83298bb_arm64 as a component of Red Hat Ansible Automation Platform 2.7; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:21fab4b77580795980fd60b24ab1d6a3cc159a9246beccd1c19938bca94edd23_amd64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/mta/mta-solution-server-rhel9@sha256:f8c8651cc5fa016003ef4105f28775e0b225472d2c3135e5f37d1e1f748c515e_arm64 as a component of Red Hat Migration Toolkit for Applications 8.2; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:2cc4c9bed34fa7c1332950095e70cf354979734e8dac016f99be5afaec4de564_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:7c191c82302255ca50b047d803a20bdde14fc983e56d5c89c30fb16e0cbb7f69_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-feature-server-rhel9@sha256:997ff89fdc377c4e5fa2d4c68f41a3681dbaaedb6b45f32ba11a41b250e5e15f_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:228901314e804cc7e306a83cad1cffc3bd8d90c3f8578ba098d446d5ec867559_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:445fa9a998740ccee19deb115b31f5db14b7acd41211751f6f0efa004a6c9892_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:495f7bd3913965ffe13bcda945ec3b42fc5e615724b196c83dc6bb5b08eaf93d_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-datascience-cpu-py312-rhel9@sha256:6649e927cfdce45abff17efef0407281b7104cca6cef60bafae73b7618147f97_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-cuda-py312-rhel9@sha256:7a6bbe8a084a47e55c3f9d48156eac0aefe99ebbc17052dad50768e4ab31d85a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-llmcompressor-cuda-py312-rhel9@sha256:06f92dc1000eeef794c71234dd05e64b684d27bee25a2b62d49f9a4e611eb309_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-pytorch-rocm-py312-rhel9@sha256:caaa83c557fdef72753d67bfbdaab38898c1fedb85089c51e154512ef22c917b_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:1b88511ef80ea5522de6519dc44c0204ae832b5faf0e331af170247bd7d7d288_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-pipeline-runtime-tensorflow-cuda-py312-rhel9@sha256:6279ac2ba5f99869b69df905a8d7acc40c5470b37efccd1e1ef3c31b603779dc_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-training-cuda128-torch29-py312-rhel9@sha256:2300bbd398742940737a7ac3bc337a81c3300ee3a362e246acf94ea543e5186a_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:7b5d9229b556e775c92ea99f5e1741c9231c00830063a3193cf18e0dabf2daa6_s390x as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:abcf19dad3e36cf2105a9e083f93c659cd5a4169a2bdbb4c590f6790af2dd358_ppc64le as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d07410afbf595a9be989c5a33f781f881e5d23488457fdb3bd0fe4dec7f5255e_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9@sha256:d5dfd771b6a7a242f53a7e3d8d6f951812f3350193bd807e4a0433316cafd78f_amd64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:19f6df5cd367e8cca417be8d2d9d0a2c014266c5420394f563f525296da70662_arm64 as a component of Red Hat OpenShift AI 3.3; registry.redhat.io/rhoai/odh-workbench-codeserver-datascience-cpu-py312-rhel9@sha256:468932363456901017639ec9f53c5538248cc542cfed76741b9c44ce9f2f5192_ppc64le as a component of Red Hat OpenShift AI 3.3; and 62 more
    Red Hat Product Security ↗
Material fields only · duplicate refreshes suppressed · history retained for the configured operational retention period
CVE published
Added to CISA KEV
Fixed release or patch reference recorded
ENISA EUVD · EUVD-2026-32016↗Vendor CSAF · Red Hat Product Security↗CISA KEV record↗CVE authority or vendor reference · GitHub GHSA-86QP-5C8J-P5MR↗Patch or update reference↗Mitigation reference↗Mitigation reference↗Public exploit reference↗Public exploit reference↗Official CVE record (CNA and ADP data)↗
Technical terms and abbreviations used in this report
CVE
Common Vulnerabilities and Exposures: the public identifier for one disclosed vulnerability.
CVSS
Common Vulnerability Scoring System: a technical severity framework; it is not patching priority by itself.
EPSS
Exploit Prediction Scoring System: FIRST's estimate of the probability that exploitation activity will be observed in the next 30 days; it is a forecast, not confirmation.
CWE
Common Weakness Enumeration: the standard category describing the underlying software or hardware weakness.
CNA
CVE Numbering Authority: an organisation authorised to assign and publish CVE records.
CISA ADP
Cybersecurity and Infrastructure Security Agency Authorized Data Publisher: structured enrichment added to a CVE record.
NVD
National Vulnerability Database: NIST's enrichment service for CVE records.
CERT / CSIRT
A computer security incident response team that publishes warnings or coordinates incident response.
PoC
Proof of concept: public material that demonstrates or helps reproduce exploitation.
CSAF
Common Security Advisory Framework: a machine-readable format for security advisories.
LoTL
Living off the land: abuse of legitimate tools or system functions during an attack.
Free version - for non-commercial use only.CVE-2026-48710 · cve.blacktree.nl