CVE-2026-83495
Description
A flaw was found in the Trainer v2 TrainJob API. A user with permissions to create TrainJobs can exploit this by injecting valueFrom.secretKeyRef into environment variable definitions. This allows them to read and exfiltrate sensitive information (secrets) from the namespace, leading to a privilege escalation. This occurs when the TrainJob Role-Based Access Control (RBAC) is broader than the Secret read RBAC.
Statement
This issue has a Low impact as it affects Trainer v2, which is a Technology Preview feature in Red Hat OpenShift AI. Exploitation requires a user to have permissions to create TrainJobs while also having broader RBAC than allowed for Secret read access, enabling privilege escalation to exfiltrate secret values within the same namespace.
Mitigation
To mitigate this vulnerability, ensure that the Role-Based Access Control (RBAC) for users creating TrainJobs is aligned with their Secret read permissions. Alternatively, restrict the `valueFrom.secretKeyRef` field within the validating webhook to an allowlist of permitted secret names. Review and adjust RBAC policies to prevent users from creating TrainJobs with broader access to Secrets than intended.
Understanding the Weakness (CWE)
Access Control
Technical Impact: Gain Privileges or Assume Identity
Frequently Asked Questions
Not sure what something means? Check out our Security Glossary.
Want to get errata notifications? Sign up here.
