CVE-2026-15218 Models-as-a-service: red hat openshift ai: maas-api and maas-controller serviceaccounts with excessive permissions lead to privilege escalation

[
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI 3.4",
    "collectionURL": "https://catalog.redhat.com/software/containers/",
    "packageName": "rhoai/odh-maas-api-rhel9",
    "defaultStatus": "affected",
    "versions": [
      {
        "version": "1787153683",
        "lessThan": "*",
        "versionType": "rpm",
        "status": "unaffected"
      }
    ],
    "cpes": [
      "cpe:/a:redhat:openshift_ai:3.4::el9"
    ]
  },
  {
    "vendor": "Red Hat",
    "product": "Red Hat OpenShift AI (RHOAI)",
    "collectionURL": "https://access.redhat.com/downloads/content/package-browser/",
    "packageName": "rhoai/odh-maas-controller-rhel9",
    "defaultStatus": "affected",
    "cpes": [
      "cpe:/a:redhat:openshift_ai"
    ]
  }
]