CVE-2026-18950

creationtimestamp| type| source ---|---|--- 2026-08-10 23:01:22+00:00| seen| https://bsky.app/profile/thehackerwire.bsky.social/post/3msr7em5vzi2a 2026-08-11 00:15:42+00:00| seen| https://bsky.app/profile/termsofsurrender.bsky.social/post/3msrdjjue7q2v...

CVE-2026-18950

A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the roleRef field, allowing a user to specify an arbitrary role, including highly privileged ones like cluster-admin...

CVE-2026-18950 Odh-dashboard: odh-dashboard: confused-deputy privilege escalation via unchecked roleref in rolebinding creation

A flaw was found in odh-dashboard. An authenticated user of the dashboard can exploit a vulnerability related to how RoleBindings are created. The system does not properly validate the roleRef field, allowing a user to specify an arbitrary role, including highly privileged ones like cluster-admin...