A critical authorization flaw (CVSS 9.1) in the ai-gateway-payload-processing component of Red Hat OpenShift AI lets an authenticated attacker use another tenant's LLM API keys and consume that tenant's resources and quotas.
What Is It
CVE-2026-117574 is an authorization bypass in ai-gateway-payload-processing, classified as CWE-639 (Authorization Bypass Through User-Controlled Key). An authenticated remote attacker can put another tenant's model identifier in the request body or header. The service doesn't check authorization before it pulls credentials from the shared store, so it injects the target tenant's API keys into the attacker's request.
Red Hat ([email protected]) published the record on 2026-10-28. NVD lists it as "Awaiting Analysis."
Why It Matters
Red Hat rates the flaw 9.1 (CRITICAL) with vector CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:C/C:H/I:L/A:L:
- Network-reachable, low complexity: No user interaction is needed, and any low-privileged authenticated user can exploit it.
- Scope changed: The impact reaches past the attacker's own tenant to other tenants' credentials.
- High confidentiality impact: The attacker gets to use another tenant's API keys.
- Low integrity and availability impact: The attacker can send unauthorized requests and use up another tenant's LLM resources and quotas.
On multi-tenant AI platforms, this breaks the separation between tenants and can push LLM costs and quota use onto the victim.
Exploitation status: The supplied CISA KEV entry is empty. KEV does not confirm active exploitation of this CVE at this time.
What's Vulnerable
- Vendor: Red Hat
- Product: Red Hat OpenShift AI (RHOAI),
cpe:/a:redhat:openshift_ai - Affected package:
rhoai/odh-ai-gateway-payload-processing-rhel9 - Listed as unaffected:
rhoai/odh-ai-gateway-payload-processing-e2e-rhel9
The supplied record doesn't list specific affected or fixed version ranges.
Patch Status
The supplied NVD data doesn't name a fixed version or patch release. With no KEV listing, there is no CISA-mandated required action or due date. Organizations running Red Hat OpenShift AI should:
- Check the Red Hat security advisory and Bugzilla entry below for fix availability and guidance.
- Find deployments that use the
odh-ai-gateway-payload-processing-rhel9package. - Prioritize remediation in multi-tenant environments where tenants share a credential store.
Sources
- NVD: CVE-2026-117574
- Red Hat Security: CVE-2026-117574
- Red Hat Bugzilla: Bug 2494861
- CISA Known Exploited Vulnerabilities Catalog (no entry for this CVE in the supplied data)