CVE-2026-5483

CVE-2026-5483 is a critical vulnerability in the odh-dashboard component of Red Hat OpenShift AI that exposes Kubernetes Service Account tokens through a vulnerable NodeJS endpoint, potentially allowing attackers to gain unauthorized access to Kubernetes resources and cluster infrastructure. The vulnerability carries a CVSS score of 9.9 (CRITICAL) and can be exploited by authenticated attackers with low complexity over the network. The attack requires low privileges and no user interaction, resulting in high impact across confidentiality, integrity, and availability of affected systems. The vulnerability affects the entire Kubernetes cluster due to its wide scope of potential compromise. There is currently no evidence of active exploitation in the wild, as the vulnerability is not listed in the Known Exploited Vulnerabilities (KEV) catalog and remains inactive on threat intelligence hot lists. The EPSS score of 0.0006 indicates relatively low probability of exploitation compared to the broader vulnerability landscape, though the critical severity rating warrants immediate patching efforts. Organizations running Red Hat OpenShift AI should prioritize updating the odh-dashboard component to remediate this token disclosure vulnerability.