Copyright © 2012 Red Hat, Inc. All rights reserved. Moderate 2026-09-07T07:07:25 odh-dashboard: odh-dashboard: NIM credential Secret readable by any authenticated user 6.5 CVSS:3.1/AV:N/AC:L/PR:L/UI:N/S:U/C:H/I:N/A:N CWE-862

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).

A flaw was found in odh-dashboard in Red Hat OpenShift AI. The backend-for-frontend route GET /api/nim-serving/:nimResource reads Kubernetes Secrets using the dashboard service account and returns the full Secret object, including .data, without an authorization check. Any authenticated dashboard user can retrieve the cluster NVIDIA NGC API key Secret (apiKeySecret) and the NIM image pull secret (nimPullSecret). Create and delete of the same NIM credential are admin-gated; the read path is not. This is missing authorization (CWE-862) and insufficiently protected credentials (CWE-522). It is distinct from CVE-2026-5483 (service-account token leak in the Kubernetes client response wrapper on the same route) and CVE-2026-16456 (odh-model-controller cross-namespace confused deputy).

This Moderate vulnerability in odh-dashboard allows an authenticated, non-admin OpenShift AI dashboard user to read cluster-global NVIDIA NGC / NIM credentials. The GET /api/nim-serving/:nimResource handler uses the dashboard service account to fetch Secrets and returns Secret .data. Sibling NIM create/delete routes use secureAdminRoute; this read path does not. Exploitation requires a logged-in dashboard session and a configured NIM Account. The leaked credentials are shared infrastructure secrets, not per-user. CVE-2026-5483 addressed a different leak (dashboard SA token in the full k8s client response) on the same endpoint and did not add an authorization guard or strip Secret .data. Red Hat would like to thank Dmitry Maranik (Sectum AI) for reporting this issue. Until a patched dashboard image is available, disable or remove the NVIDIA NIM integration so the NIM Account CR and associated Secrets are not present. Restrict OpenShift AI dashboard access to trusted administrators if NIM credentials must remain configured. Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-core-bff-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-dashboard-operator-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-dashboard-rhel8 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-dashboard-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-agent-ops-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-automl-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-autorag-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-eval-hub-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-gen-ai-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-maas-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-mlflow-rhel9 Red Hat OpenShift AI (RHOAI) Fix deferred rhoai/odh-mod-arch-model-registry-rhel9 https://www.cve.org/CVERecord?id=CVE-2026-86332 https://nvd.nist.gov/vuln/detail/CVE-2026-86332