AI Threat AlertRed Hat
AI Threat Alert tracks 55 known AI/ML vulnerabilities affecting Red Hat products — each enriched with CVSS severity, EPSS exploit probability, patch status, and CISO-grade analysis. Browse every Red Hat CVE below, sorted by severity and recency.
| Severity | CVE | Headline | Package | CVSS |
|---|---|---|---|---|
| MEDIUM | CVE-2026-15588 | GLib GDBus: unbounded auth line enables local DoS | rhaiis/vllm-cuda-rhel9 | 5.3 |
| MEDIUM | CVE-2026-58010 | GLib: off-by-one read in GVariant causes DoS | rhaiis/vllm-cuda-rhel9 | 6.5 |
| MEDIUM | CVE-2026-58013 | GLib: buffer over-read in line reader causes DoS | rhaiis/vllm-cuda-rhel9 | 6.5 |
| MEDIUM | CVE-2026-58012 | GLib: g_regex_replace RAW over-read leaks bytes, DoS | rhaiis/vllm-cuda-rhel9 | 6.5 |
| HIGH | CVE-2026-16118 | xdgmime: heap overflow in magic file parsing | rhaiis/vllm-cuda-rhel9 | 7.1 |
| MEDIUM | CVE-2026-58011 | GLib: out-of-bounds read in g_date_time_get_ymd | rhaiis/vllm-cuda-rhel9 | 6.5 |
| HIGH | CVE-2026-58014 | GLib: off-by-one in key file parser enables DoS | rhaiis/vllm-cuda-rhel9 | 7.3 |
| MEDIUM | CVE-2026-58015 | GLib: D-Bus cookie path traversal leaks local files | rhaiis/vllm-cuda-rhel9 | 5.9 |
| LOW | CVE-2025-6170 | libxml2: xmllint shell stack overflow causes local crash | rhaiis/vllm-cuda-rhel9 | 2.5 |
| HIGH | CVE-2026-86344 | 389-ds-base: LDAP worker pool exhaustion DoS | 7.5 | |
| HIGH | CVE-2026-14164 | libarchive: RAR5 double free enables remote DoS | rhaii/vllm-gaudi-rhel9 | 7.5 |
| LOW | CVE-2025-8556 | CIRCL FourQ: low-order point flaw weakens key exchange | rhelai1/instructlab-amd-rhel9 | 3.7 |
| MEDIUM | CVE-2025-13327 | uv: ZIP parsing differential allows code execution | rhaiis-preview/vllm-cuda-rhel9 | 6.3 |
| MEDIUM | CVE-2026-114406 | Red Hat CA store: weak eMudhra intermediates enable TLS MITM | rhoai/odh-trustyai-garak-lls-provider-dsp-rhel9 | 6.8 |
| HIGH | CVE-2024-7557 | OpenShift AI: model auth bypass via exposed token | rhoai/odh-kf-notebook-controller-rhel8 | 8.8 |
Page 3 of 3
Frequently asked questions
How many known vulnerabilities affect Red Hat?
55 AI/ML CVEs affecting Red Hat products are tracked, sourced from NVD and GitHub Advisory.
What Red Hat products are affected?
The CVEs below map to the Red Hat AI/ML packages and tools tracked by AI Threat Alert; open any CVE to see the affected components and versions.
Where does the Red Hat vulnerability data come from?
Data is sourced from NVD and GitHub Advisory, then enriched with CVSS severity, EPSS exploit probability, and patch status for each CVE.
How can I monitor Red Hat for new vulnerabilities?
AI Threat Alert tracks Red Hat continuously; a Pro subscription adds breaking alerts when new CVEs affecting Red Hat are published.
How do I assess Red Hat's security exposure?
Each CVE below carries CVSS severity and exploitation signals, so you can review the highest-severity Red Hat issues first and judge the exposure for your stack.